Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a

CVSS 4.0 8.6 HIGHCheck source for fixed versionsKEV status unknown

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-82369

Published

Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution contexts on managed switches. An attacker with command execution permissions can leverage this flaw to run unauthorized shell commands across target fabric switches, bypassing command allow-lists and obtaining full administrative switch access. This vulnerability affects all Brocade SANnav versions before 3.0.1a.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-82369

Published

SANnav

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Brocade",
                    "product": "SANnav",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "3.0.1a",
                            "changes": [
                                {
                                    "at": "3.0.1a",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "Brocade SANnav"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 15:26 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current