Insufficient Input Sanitization in Brocade SANnav CLI Scripting Component

CVE-2026-82369

What is CVE-2026-82369?

The Brocade SANnav CLI scripting component exhibits insufficient input sanitization of shell metacharacters. This vulnerability allows authenticated users to escape restricted execution contexts in managed switches. With the right command execution permissions, an attacker can exploit this weakness to execute unauthorized shell commands across the target fabric switches, effectively bypassing command allow-lists and gaining full administrative access to the switches. This flaw impacts all versions of Brocade SANnav prior to the release of 3.0.1a.

References