Plaintext Exposure in Brocade SANnav Discovery Service

CVE-2026-82371

What is CVE-2026-82371?

The Brocade SANnav discovery service is vulnerable to plaintext exposure of sensitive authentication data due to improper handling of log files. This security flaw enables individuals with file read access to retrieve critical administrative switch credentials and active session tokens. An attacker with access to system logs or support bundles can exploit this exposure to compromise managed network infrastructure, putting active application sessions at risk. Users of Brocade SANnav are advised to upgrade to version 3.0.1a or later to mitigate this vulnerability.

References