PT-2026-5755 · Brocade · Brocade Sannav

Published 2026-02-03 · Updated 2026-03-03 · CVE-2025-12774

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 3.0

Description A flaw exists in the migration script of Brocade SANnav that could allow an attacker to gather database sql queries contained within the SANnav support save file. An attacker who has access to the Brocade SANnav supportsave file could open it and potentially obtain sensitive information, including details about database tables and encrypted passwords.

Recommendations Update to version 3.0 or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-12774

Affected Products

Brocade Sannav

References · 7

• https://osv.dev/vulnerability/CVE-2025-12774 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12774 · Security Note
• https://twitter.com/CVEnew/status/2018534814983368830 · Twitter Post
• https://t.me/CVEtracker/43536 · Telegram Post
• https://t.me/cveNotify/153874 · Telegram Post
• https://t.me/cveNotify/150671 · Telegram Post