---
id: CVE-2026-5047
title: "A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and\_ authentication tokens in log files"
summary: "A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and\_ authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supports…"
severity: medium
cvss: 5.7
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-922
vendor: broadcom
product: brocade_sannav
affected:
  - brocade_sannav < 2.4.0b
patched:
  - brocade_sannav 2.4.0b
published: '2026-10-08'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:19:12.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-5047'
references:
  - url: 'https://support.broadcom.com/external/content/SecurityAdvisories/0/37933'
    label: sirt@brocade.com
tags:
  - nvd
  - cve.org
  - score-dispute
epss: 0.00196
epssPercentile: 0.09249
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-08T15:14:41.593097Z'
scores:
  nvd: 5.7
  cna: 8.2
ingestedAt: '2026-10-08T06:06:55.456Z'
---

## Overview

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.

## Affected

- `brocade_sannav < 2.4.0b`

## Remediation

Upgrade past the affected range:

- `brocade_sannav 2.4.0b`