CVE-2026-5047
Received Received - Intake

Authentication Token Exposure in Brocade SANnav Logs

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: Brocade Communications Systems, LLC

Description
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-08
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-5047
EUVD
EUVD-2026-94756

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Brocade Brocade SANnav 0
Brocade Brocade SANnav 3.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-922 The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Brocade SANnav before versions 2.4.0b and 3.0.0 causes encoded passwords and authentication tokens to be printed in log files. An authenticated attacker with access to these logs could extract sensitive credentials.

Detection Guidance

Check SANnav log files for encoded passwords or authentication tokens. Look for entries in supportsave logs that may contain sensitive data. Review access logs for unauthorized access to log files.

Impact Analysis

An attacker could gain access to passwords and authentication tokens, potentially leading to unauthorized access to systems or data managed by Brocade SANnav. This could result in data breaches or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade Brocade SANnav to version 2.4.0b or 3.0.0 or later. Restrict access to SANnav log files and supportsave data. Rotate all exposed passwords and authentication tokens immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-5047. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart