CVE-2026-82372CWE-532

CVE-2026-82372

published September 25, 2026

CVSS
8.5
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the potential exposure of keys used to secure network tunnels.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
8.5 · CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00168 · 5.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-09-25T00:17Z
References (1)
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38997 · [email protected]
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 19:08Z
    Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
    cvelistv5