CVE-2026-82370
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch configurations or manipulate application container runtimes. This vulnerability affects Brocade SANnav versions before 3.0.1a.
| CWE | CWE-77 |
| Vendor | brocade |
| Product | sannav |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for brocade sannav
Be the first to know when new unknown vulnerabilities affecting brocade sannav are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Brocade / SANnav
before 3.0.1a