{"id":"CVE-2026-5047","title":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files","summary":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supports…","severity":"high","cvss":8.2,"cvssVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","cwe":["CWE-922"],"vendor":"Brocade","product":"Brocade SANnav","affected":["sannav < 2.4.0b","sannav 3.0.0"],"published":"2026-10-08","updated":"2026-10-08","sourceUpdated":"2026-10-08T06:16:42.740","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-5047","references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/37933","label":"sirt@brocade.com"}],"tags":["nvd","cve.org"],"cvssSource":"cna","ingestedAt":"2026-10-08T06:06:55.456Z","slug":"CVE-2026-5047","body":"## Overview\n\nA vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}