Brocade SANnav
- Software type
- Network management
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, Brocade SANnav recorded 4 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Brocade SANnav and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-5769CVE-2026-5769CVE-2026-5049CVE-2026-5049CVE-2026-5048CVE-2026-5048CVE-2026-5047CVE-2026-5047CVE-2025-1053Brocade SANnav encryption key is logged in the debug logs| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-5769CVE-2026-5769 | Exploitation statusNot exploited | FixYes | Published10/08/2026 |
| SeverityMedium |
CVE-2026-5049CVE-2026-5049 | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-5048CVE-2026-5048 | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityMedium |
|---|
CVE-2026-5047CVE-2026-5047 | Exploitation statusNot exploited | FixYes | Published10/08/2026 | SeverityHigh |
|---|
CVE-2025-1053Brocade SANnav encryption key is logged in the debug logs | Exploitation statusNot exploited | FixNo | Published02/14/2025 | SeverityHigh |
|---|
CVE-2024-4282Weak TLS Ciphers on Brocade SANnav OVA SSH port 22 | Exploitation statusNot exploited | FixNo | Published02/14/2025 | SeverityHigh |
|---|
CVE-2024-2240Docker implementation in Brocade SANnav is missing Audit Rules. | Exploitation statusNot exploited | FixNo | Published02/14/2025 | SeverityHigh |
|---|
CVE-2024-10405Weak TLS Ciphers on Brocade SANnav port 443 & 18082 | Exploitation statusNot exploited | FixNo | Published02/14/2025 | SeverityMedium |
|---|
CVE-2024-10404Clear text password seen in switch-asset-collectors-mw in Brocade SANnav supportsave | Exploitation statusNot exploited | FixNo | Published02/14/2025 | SeverityMedium |
|---|
CVE-2024-2860CVE-2024-2860 | Exploitation statusNot exploited | FixNo | Published05/08/2024 | SeverityHigh |
|---|
CVE-2024-2859By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859) | Exploitation statusNot exploited | FixNo | Published04/27/2024 | SeverityMedium |
|---|
CVE-2024-4173SANnav versions exposes Kafka in the wan interface. | Exploitation statusNot exploited | FixNo | Published04/25/2024 | SeverityHigh |
|---|
CVE-2024-4161Syslog traffic sent in clear-text | Exploitation statusNot exploited | FixNo | Published04/25/2024 | SeverityHigh |
|---|
CVE-2024-4159Protection mechanisms | Exploitation statusNot exploited | FixNo | Published04/25/2024 | SeverityMedium |
|---|
CVE-2024-29969TLS/SSL weak message authentication code ciphers are added by default for port 18082 | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29968SQL Table names, column names, and SQL queries are collected in DR standby Supportsave | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29967Insecure Docker mount points in Brocade SANnav expose sensitive files | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29966hard-coded credentials in the documentation that appear as the appliance root password | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29965Insecure backup | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29964Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29963Brocade SANnav contains hardcoded TLS keys used by Docker | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityLow |
|---|
CVE-2024-29962Insecure file permission setting that makes files world-readable | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29961supply-chain attack risk | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29960Identical SSH keys utilized inside the OVA image (CVE-2024-29960) | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityMedium |
|---|
CVE-2024-29959Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29958Encryption key in the console when a privileged user executes the script to replace the Brocade SANnav Management Portal standby node. | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29957Encryption key is stored in the DR log files | Exploitation statusNot exploited | FixNo | Published04/19/2024 | SeverityHigh |
|---|
CVE-2024-29956cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav | Exploitation statusNot exploited | FixNo | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-29955Insertion of Sensitive Information into Brocade SANnav Log File | Exploitation statusNot exploited | FixNo | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-29952Clear text storage of sensistive information by manipulating command variables | Exploitation statusNot exploited | FixNo | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-29951Brocade SANnav has weak encryption in internal SSH ports | Exploitation statusNot exploited | FixNo | Published04/17/2024 | SeverityMedium |
|---|
CVE-2024-29950Brocade SANnav before v2.3.1, v2.3.0a uses weak encryption | Exploitation statusNot exploited | FixNo | Published04/17/2024 | SeverityHigh |
|---|
CVE-2023-31925Storage of clear text password in Brocade SANnav | Exploitation statusNot exploited | FixNo | Published08/31/2023 | SeverityMedium |
|---|
CVE-2022-33187Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs | Exploitation statusNot exploited | FixNo | Published12/09/2022 | SeverityMedium |
|---|
34 Results | Page 1 of 1