CVE-2026-5769: Medium severity Brocade SANNav vulnerability
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM). This can happen when the SANnav server encounters an Out Of Memory (OOM) condition. The vulnerability could allow an authenticated admin user with access to the server hosting the SANnav to potentially view the memory swap file and access the password(s).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade SANnavto a version that resolves this vulnerability.Fixed in 3.0.1
Event History
Frequently Asked Questions
Who can realistically exploit this issue?
Exploitation requires an authenticated administrative user who has access to the server hosting the SANnav VM. The attacker must also be able to access the VM's memory swap file.
What conditions are required for password exposure?
The SANnav server must encounter an out-of-memory condition, causing the Brocade Fabric OS switch administrator password to be captured in plaintext in a memory swap file. The issue affects Brocade SANnav versions before 3.0.1.
What is the impact if the swap file is accessed?
An authorized admin with server access may be able to view the swap file and obtain Brocade Fabric OS switch administrator password(s). The available data identifies confidentiality impact but does not indicate direct integrity or availability impact.