HIGH 8.6 NVD

CVE-2026-82370

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch configurations or manipulate application container runtimes. This vulnerability affects Brocade SANnav versions before 3.0.1a.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/Secur

Published: 2026-09-24 · Source: NVD · Feed updated: 2026-09-24

This high severity vulnerability with a CVSS score of 8.6 was published on 2026-09-24 via NVD.

vulnfeed aggregates 12931 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.