What is the CVSS score of CVE-2026-20361?

CVE-2026-20361 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Which versions of Cisco Nexus Dashboard are affected by CVE-2026-20361?

Cisco Nexus Dashboard, the centralized management platform for Cisco data center networking, contains multiple SQL injection vulnerabilities rated 8.8 that could allow an attacker reaching the…

How to fix or mitigate CVE-2026-20361?

Within 24 hours, inventory every Cisco Nexus Dashboard instance, confirm deployed versions against the vendor advisory, and immediately restrict management-interface reachability to trusted administrator subnets, jump hosts, or management VLANs only - confirming no instance is exposed to the internet or to general user networks; simultaneously enable and forward detailed application and audit logs to the SIEM and review recent activity for SQL injection patterns or anomalous queries. Within 7 days, implement all vendor-published workarounds from the Cisco advisory, enforce multi-factor authentication and least-privilege role assignments on all administrative accounts, tighten network segmentation around the management plane, and deploy SQL injection detection signatures at the perimeter of the management network. Within 30 days, continue monitoring Cisco's advisory for a fixed release and, once published, test and deploy it in the next available change window; in the interim, re-validate that compensating controls remain effective, verify that current configuration and data backups are restorable, and schedule a follow-up review to confirm the platform is either patched or permanently isolated.

Cisco Nexus Dashboard CVE-2026-20361

EUVD-2026-81105 HIGH

SQL Injection (CWE-89)

2026-09-16 cisco

GHSA-7qvg-j2r2-pg38

SQLi Cisco Cisco Nexus Dashboard

8.8

CVSS 3.1 · NVD

Severity by source

Vendor (cisco) PRIMARY

HIGH

qualitative

NVD

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable low-complexity SQLi needing a valid low-privilege Nexus Dashboard account (PR:L); backend DB access supports read, tamper, and DoS, so C/I/A:H.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (cisco).

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 16, 2026 - 20:39 vuln.today

CVE Published

Sep 16, 2026 - 20:08 nvd

HIGH 8.8

DescriptionNVD

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.

AnalysisAI

Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authenticated attacker with low privileges over the network. Successful exploitation could allow reading, modifying, or deleting sensitive data and disrupting the management interface, with high impact to confidentiality, integrity, and availability as reflected in the CVSS 3.1 score of 8.8. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Requires a valid authenticated session on the Cisco Nexus Dashboard management interface at a low privilege level (PR:L) - no user interaction and no special non-default configuration are indicated. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H = 8.8 High) describes a remotely reachable, low-complexity SQL injection requiring only low-privilege authentication, yielding full confidentiality, integrity, and availability impact on the Nexus Dashboard database backend. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Patch available per vendor advisory: apply the software hardening release referenced in the Cisco advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ndw1-psFvnrg; this is a vendor-released update, and the exact patched version is not specified in the provided data. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory every Cisco Nexus Dashboard instance, confirm deployed versions against the vendor advisory, and immediately restrict management-interface reachability to trusted administrator subnets, jump hosts, or management VLANs only - confirming no instance is exposed to the internet or to general user networks; simultaneously enable and forward detailed application and audit logs to the SIEM and review recent activity for SQL injection patterns or anomalous queries. …

Threat intelligence, references, and detailed analysis are available after sign-in.