CVE-2026-5048

Broadcom Brocade Sannav: SQL injection

Risk score: 51/100
CVSS: 8.0 v3.1
Exploit chance (30 days): 0.2%
Published: 8 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.
Affected: Broadcom Brocade Sannav before 3.0.0
Fix: Upgrade Broadcom Brocade Sannav to 3.0.0 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 8.0 high

References

https://support.broadcom.com/external/content/SecurityAdvisories/0/37932

Original description

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.

Last activity 8 Oct 2026. Patch Forecast updates every hour.