high8.6
CVE-2026-82370
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative…
Impact
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch configurations or manipulate application container runtimes. This vulnerability affects Brocade SANnav versions before 3.0.1a.
Affected products
| Product | Affected versions |
|---|---|
| Brocade SANnav | before 3.0.1a. |
Versions were read from the advisory text. No structured product data has been published for this record yet.