CVE-2026-82368
Last modified
CVE-2026-82368 is a high-severity vulnerability rated 8.7/10 on the CVSS scale. Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Brocade | SANnav | Brocade SANnav versions before 3.0.1a |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-82368?
How severe is CVE-2026-82368?
How do I fix CVE-2026-82368?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8235A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0…5.5
- CVE-2026-82355When a request to the Airflow core API carries both a sessio…4.2
- CVE-2026-82356Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA k…7.5
- CVE-2026-8236Concrete CMS 9.5.0 and below is vulnerable to IDOR combined …4.3
- CVE-2026-82364A security vulnerability has been detected in macrozheng mal…4.2
- CVE-2026-82367Exposure of Data Element to Wrong Session vulnerability in a…2.3
- CVE-2026-82369Insufficient input sanitization of shell metacharacters in t…8.6
- CVE-2026-8237Concrete CMS 9.5.0 and below is vulnerable to IDOR. The `/cc…5.3
- CVE-2026-82370Unauthenticated remote command injection in the Brocade SANn…8.6
- CVE-2026-82371Plaintext exposure of sensitive authentication data in Broca…8.5
- CVE-2026-82372Improper handling of sensitive data during IPsec policy crea…8.5
- CVE-2026-8238Concrete CMS 9.5.0 and below is vulnerable to IDOR. The '/cc…5.3
Are you affected by CVE-2026-82368?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST