CVE-2026-5769CWE-313

CVE-2026-5769

Medium · published October 8, 2026

CVSS v3.1
4.1
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocade SANnav Virtual Machine (VM). This can happen when the SANnav server encounters an Out Of Memory (OOM) condition. The vulnerability could allow an authenticated admin user with access to the server hosting the SANnav to potentially view the memory swap file and access the password(s).

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
5.6 · CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00068 · 0.0th percentile
Weakness
CWE-313 · Cleartext Storage in a File or on Disk
Published
2026-10-08T10:16Z
Affected products (1)
ProductVersionsFixed in
broadcom/brocade_sannav< 3.0.13.0.1
References (1)
https://support.broadcom.com/external/content/SecurityAdvisories/0/37934 · [email protected]
EPSS history
Timeline
  • 09 OCT 03:29Z
    EPSS moved — → 0%
    epss
  • 08 OCT 06:07Z
    A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…
    cvelistv5
  • 08 OCT 06:07Z
    A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the…
    cvelistv5