SANnav
- Software type
- Network management
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, SANnav recorded 9 security vulnerabilities in the last 90 days, of which 6 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of SANnav and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-85417Incomplete property masking in the SANnav logging subsystemCVE-2026-82372Brocade SANnav Logs IPsec Pre-Shared Keys, Exposing Tunnel CredentialsCVE-2026-82371Plaintext exposure of sensitive authentication data in SANnav discovery service log filesCVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1aCVE-2026-14442Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-85417Incomplete property masking in the SANnav logging subsystem | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-82372Brocade SANnav Logs IPsec Pre-Shared Keys, Exposing Tunnel Credentials | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-82371Plaintext exposure of sensitive authentication data in SANnav discovery service log files | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
|---|
CVE-2026-14442Information exposure vulnerability in the job scheduling component of SANnav before 3.0.1a | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityMedium |
|---|
CVE-2026-14441Logic flaw in SANnav Java cache key handling object comparison handling | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityMedium |
|---|
CVE-2026-82370Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-82369Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
|---|
CVE-2026-82368CVE-2026-82368 | Exploitation statusNot exploited | FixYes | Published09/23/2026 | SeverityHigh |
|---|
CVE-2025-12774SQL queries with sensitive information printed in logs with Brocade SANnav before 3.0 | Exploitation statusNot exploited | FixNo | Published02/03/2026 | SeverityMedium |
|---|
CVE-2025-12773Plain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a | Exploitation statusNot exploited | FixNo | Published02/03/2026 | SeverityHigh |
|---|
CVE-2025-12772Plaintext Switch admin login password is seen in Brocade SANnav support save | Exploitation statusNot exploited | FixNo | Published02/02/2026 | SeverityHigh |
|---|
CVE-2025-12680Brocade SANnav DataBase plaintext password is logged in failover logs (CVE-2025-12680) | Exploitation statusNot exploited | FixNo | Published02/02/2026 | SeverityMedium |
|---|
CVE-2025-12679Plain text pbe key visible in audit log during Brocade SANnav migration from 2.4.0a to 3.0.0 | Exploitation statusNot exploited | FixNo | Published02/02/2026 | SeverityHigh |
|---|
CVE-2022-43937Brocade SANnav Information Disclosure Vulnerability | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43936Brocade Fabric OS switch passwords when debugging is enabled | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43934Weak Key-exchange algorithms | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityMedium |
|---|
CVE-2022-43933configuration secrets are logged in support-save | Exploitation statusNot exploited | FixNo | Published11/21/2024 | SeverityMedium |
|---|
CVE-2023-31424Web authentication and authorization bypass | Exploitation statusNot exploited | FixNo | Published08/31/2023 | SeverityHigh |
|---|
CVE-2023-31423Possible information exposure through log file vulnerability | Exploitation statusNot exploited | FixNo | Published08/31/2023 | SeverityMedium |
|---|
20 Results | Page 1 of 1