{"id":"CVE-2026-82368","published":"2026-09-23T19:19:34.747","lastModified":"2026-09-24T19:36:39.327","description":"Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches under the security context of the SANnav management user.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-284"],"vendors":[],"products":[],"references":[{"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38993","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}