EUVD-2026-85750
GHSA-26q7-gcmx-3cf3
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent management-network reach (AV:A) and low complexity; PR:N follows the description's 'unauthenticated' claim, though vendor PR:L conflicts; full command execution gives C/I/A:H, scope unchanged.
Primary rating from Vendor (brocade).
CVSS VectorVendor: brocade
Lifecycle Timeline
4DescriptionCVE.org
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch configurations or manipulate application container runtimes. This vulnerability affects Brocade SANnav versions before 3.0.1a.
AnalysisAI
Command injection in Brocade SANnav orchestrator versions before 3.0.1a enables network-adjacent attackers to execute arbitrary administrative Fibre Channel switch CLI commands and manipulate container runtimes, achieving high impact on confidentiality, integrity, and availability. The vendor CVSS 4.0 score is 8.6 (AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H); however, our independent assessment using CVSS 3.1 rates it 8.8 with PR:N (unauthenticated), and the description states unauthenticated while the vector indicates PR:L - authentication requirements are not confirmed from available data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network-adjacent access (AV:A) to the segment hosting the Brocade SANnav orchestrator HTTP service - it is not exploitable from an arbitrary remote/Internet position without reaching the management network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a serious, high-priority flaw on paper: CWE-77 command injection yielding execution of administrative Fibre Channel switch CLI commands and container-runtime manipulation, with full high impact to confidentiality, integrity and availability (VC:H/VI:H/VA:H) at CVSS 4.0 base 8.6. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Brocade SANnav 3.0.1a or later; this is the vendor-released patch. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, restrict network access to Brocade SANnav orchestrator management interfaces to trusted administrative VLANs or jump hosts, ensure the appliance is not reachable from general user or adjacent networks, and review SANnav, Fibre Channel switch, and container runtime logs for unexpected CLI commands, new administrative accounts, or unauthorized configuration changes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. Rated high seve
A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prio
Incomplete log sanitization in Brocade SANnav before 3.0.1a causes extension switch IPsec pre-shared keys (PSKs) to be w
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-au
An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address tha
A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header
A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remo
An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that co
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prio
The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users
Authenticated OS command injection in the management interface and session-processing routines of Brocade Fabric OS allo
Brocade Fabric OS contains an OS command injection flaw in the REST API management interface that lets an authenticated,
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today