CVE-2026-14443 Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a
Attackers with log access can obtain IPsec pre-shared keys from Brocade SANnav logs, potentially compromising encrypted network tunnels.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-14443?
CVE-2026-14443 is a high-severity vulnerability in Brocade SANnav, published on 24 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permit extension switch pre-shared keys to be written to system logs. Individuals with read access to container logs or support archives can obtain these keys, leading to the potential compromise of encrypted network tunnels.
Weakness: CWE-532
Which versions are affected by CVE-2026-14443?
How do I fix CVE-2026-14443?
No fix has been published for CVE-2026-14443 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-14443 being exploited?
There is no known exploitation of CVE-2026-14443 in the wild and no public exploit code.
Sources
Also known as GHSA-985r-r2fq-jh5w.