CVE-2026-85417 MEDIUM

CVE-2026-85417: Incomplete property masking in the SANnav logging subsystem

Vendor Brocade
Product SANnav
Weakness CWE-532 · Sensitive info in logs
Published September 25, 2026
Last update September 25, 2026

CVSS base score

6.4/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords to be recorded in application logs under specific configuration conditions. Individuals with read access to system logs or support bundles can retrieve these credentials, leading to unauthorized read or management access to monitored switch environments

Key dates

02Disclosure timeline

September 25, 2026 CVE published
September 25, 2026 Record updated

Related vulnerabilities

04Related CVE