Findings

CVE-2026-5047

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files.

Published Oct 8, 2026 · updated Oct 14, 2026 · broadcom brocade sannav

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 8, 2026 · NIST NVD

    Detected

    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

Affected

  • cpe broadcom/brocade sannavversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5047

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-5047

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2026-5047

    A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

    nvd.nist.gov

References