What is GHSA-26q7-gcmx-3cf3?

GHSA-26q7-gcmx-3cf3 is a security advisory published by GitHub Security Advisories with High severity. Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits...

Which CVE IDs does GHSA-26q7-gcmx-3cf3 cover?

GHSA-26q7-gcmx-3cf3 covers the following CVE IDs: CVE-2026-82370. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-26q7-gcmx-3cf3High

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-82370 →

📋 Description

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch configurations or manipulate application container runtimes. This vulnerability affects Brocade SANnav versions before 3.0.1a.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-82370
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38995
https://github.com/advisories/GHSA-26q7-gcmx-3cf3