CVE-2025-6390

Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user.

• CWE-497

• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35909Vendor Advisory

Published

Jul 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-63889The fetch function in file thinkphp\library\think\Template.p…7.5
• CVE-2025-6389The Sneeit Framework plugin for WordPress is vulnerable to R…9.8
• CVE-2025-63891Information Disclosure in web-accessible backup file in Sour…7.5
• CVE-2025-63892A vulnerability was determined in SourceCodester Student Gra…6.8
• CVE-2025-63895An issue in the Bluetooth firmware of JXL 9 Inch Car Android…7.5
• CVE-2025-63896An issue in the Bluetooth Human Interface Device (HID) of JX…7.6
• CVE-2025-63909Incorrect access control in the component /opt/SRLtzm/bin/Ta…7.8
• CVE-2025-6391Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log…9.1
• CVE-2025-63910An authenticated arbitrary file upload vulnerability in Cohe…7.2
• CVE-2025-63911Cohesity TranZman Migration Appliance Release 4.0 Build 1461…7.2
• CVE-2025-63912Cohesity TranZman Migration Appliance Release 4.0 Build 1461…7.5
• CVE-2025-63913An issue was discovered in OpenSBI 1.3 allowing attackers to…7.5