CVE-2026-82369: Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell commands across target fabric switches, bypassing command allow-lists and obtaining full administrative switch access. This vulnerability affects all Brocade SANnav versions before 3.0.1a.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade SANnavto a version that resolves this vulnerability.Fixed in 3.0.1a
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must be an authenticated Brocade SANnav user with command execution permissions in the CLI scripting component. The issue can be used to escape restricted execution contexts on managed switches.
What is the potential impact on affected switches?
An attacker can bypass command allow-lists and execute unauthorized shell commands across target fabric switches. This can result in full administrative access to affected switches.
Which deployments are affected?
All Brocade SANnav versions before 3.0.1a are affected. The provided information does not identify any configuration-based exception or indication that the CLI scripting component is disabled by default.
What should be prioritized if an upgrade cannot be applied immediately?
Limit CLI scripting command execution permissions to only trusted users, since exploitation requires an authenticated user with those permissions. Review users who have command execution access and restrict it where possible.