<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: brocade sannav</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-5769: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured i</title><link>https://patchthecve.com/cve/CVE-2026-5769.html</link><guid>https://patchthecve.com/cve/CVE-2026-5769.html</guid><pubDate>Wed, 14 Oct 2026 19:05:00 +0000</pubDate><description>MEDIUM 4.1: A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM). This can happen when the SANnav server encounters an Out Of Memory (OOM) condition. The v</description></item><item><title>CVE-2026-5049: A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a</title><link>https://patchthecve.com/cve/CVE-2026-5049.html</link><guid>https://patchthecve.com/cve/CVE-2026-5049.html</guid><pubDate>Wed, 14 Oct 2026 19:21:22 +0000</pubDate><description>MEDIUM 5.7: A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.</description></item><item><title>CVE-2026-5048: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vul</title><link>https://patchthecve.com/cve/CVE-2026-5048.html</link><guid>https://patchthecve.com/cve/CVE-2026-5048.html</guid><pubDate>Wed, 14 Oct 2026 19:20:44 +0000</pubDate><description>HIGH 8.0: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.</description></item><item><title>CVE-2026-5047: A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens </title><link>https://patchthecve.com/cve/CVE-2026-5047.html</link><guid>https://patchthecve.com/cve/CVE-2026-5047.html</guid><pubDate>Wed, 14 Oct 2026 19:19:12 +0000</pubDate><description>MEDIUM 5.7: A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.</description></item></channel></rss>