CVE-2026-82368

Published Sep 23, 2026 Modified Sep 23, 2026 CWE-284

Description

Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.

Is your site exposed to CVE-2026-82368?

Run a free security scan — no signup, results in seconds.

Weakness Type (CWE)

CWE-284 CWE-284

References

Frequently Asked Questions

What is CVE-2026-82368? +
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.
How do I check if I'm vulnerable to CVE-2026-82368? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2026-82368 — free, no signup required.