{"id":"CVE-2026-5047","aliases":["EUVD-2026-94756","GHSA-vrg4-pprr-h7xv"],"status":"published","title":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","severity":{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00196,"percentile":0.0943,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-922"],"published":"2026-10-08T05:18:55Z","modified":"2026-10-14T21:33:09Z","products":[{"vendor":"broadcom","product":"brocade_sannav"},{"vendor":"brocade","product":"brocade sannav"}],"references":[{"url":"https://support.broadcom.com/external/content/SecurityAdvisories/0/37933","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-5047"},{"url":"https://github.com/advisories/GHSA-vrg4-pprr-h7xv"}],"sources":{"cve":[{"id":"CVE-2026-5047","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","status":"published","published":"2026-10-08T05:18:55.977Z","modified":"2026-10-08T17:55:19.289Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T13:39:39.001586Z"}],"euvd":[{"id":"EUVD-2026-94756","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","status":"published","published":"2026-10-08T05:18:55Z","modified":"2026-10-08T17:55:19Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T17:27:28.108203Z"}],"ghsa":[{"id":"GHSA-vrg4-pprr-h7xv","title":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","status":"published","published":"2026-10-08T06:31:20Z","modified":"2026-10-14T21:33:09Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T15:13:29.286626Z"}],"nvd":[{"id":"CVE-2026-5047","description":"A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and  authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave to access the passwords.","status":"published","published":"2026-10-08T06:16:42.74Z","modified":"2026-10-14T19:19:12.227Z","cvss":[{"version":"4.0","score":8.2,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:12:55.142936Z"}]}}