A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 8, 2026 · NIST NVD

   Detected

   A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.

2. Oct 14, 2026 · NIST NVD

   Updated

   A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.

Affected

• cpe broadcom/brocade sannavversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-5049

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-5049

  30-day exploitation probability 0.2%

  first.org
• NIST NVDVulnerability recordCVE-2026-5049

  A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.

  nvd.nist.gov

References

• Vendor Advisory · support.broadcom.com