Skip to content
fr Sign in
6.1 Medium

CVE-2026-20041 A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote…

Description

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by persuading an authenticated user of the device management interface to click a crafted link. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device to an attacker-controlled server. The attacker could then execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

Affected products and versions

Product Affected versions Fixed in
Cisco Nexus Dashboard Versions not published
Cisco Nexus Dashboard Insights 6.4.1 No fix stated
Cisco Nexus Dashboard Insights 6.3.1 No fix stated
Cisco Nexus Dashboard Insights 6.2 6.2.1 → 6.2.2 No fix stated
Cisco Nexus Dashboard Insights 6.1 6.1.1 → 6.1.3 No fix stated
Cisco Nexus Dashboard Insights 6.0 6.0.1 → 6.0.2 No fix stated
Cisco Nexus Dashboard Insights 5.1 5.1.0.131 → 5.1.0.135 No fix stated
Cisco Nexus Dashboard Insights 5.0 5.0.1.150 → 5.0.1.154 No fix stated
Cisco Nexus Dashboard Insights 2.2 2.2.2.125 → 2.2.2.126 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Nexus Dashboard

The 28 CVEs of Cisco Nexus Dashboard →
CVE-2026-20360 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering… 8.8 High CVE-2026-76409 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering… 8.8 High CVE-2026-20361 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering… 8.8 High CVE-2026-20325 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus… 9.9 Critical
Track this CVE