CVE-2026-5769 A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory sw
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-5769?
CVE-2026-5769 is a medium-severity vulnerability in Broadcom Brocade Sannav, published on 8 Oct 2026.
Official description
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM). This can happen when the SANnav server encounters an Out Of Memory (OOM) condition. The vulnerability could allow an authenticated admin user with access to the server hosting the SANnav to potentially view the memory swap file and access the password(s).
Weakness: CWE-313
Which versions are affected by CVE-2026-5769?
It affects 1 product.
Products include Broadcom Brocade Sannav.
How do I fix CVE-2026-5769?
No fix has been published for CVE-2026-5769 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-5769 being exploited?
There is no known exploitation of CVE-2026-5769 in the wild and no public exploit code.
Other vulnerabilities in Broadcom Brocade Sannav
- CVE-2019-16211 Hardcoded credentials in Brocade SANnav
- CVE-2024-3596 RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
- CVE-2019-16212 A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection.
- CVE-2019-16205 Weak cryptography in Brocade SANnav
- CVE-2024-2240 Docker implementation in Brocade SANnav is missing Audit Rules.
Sources
Also known as GHSA-9rgp-c27m-xwjf.