EUVD-2026-17933
GHSA-24qq-7528-p6pc
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | This vulnerability presents moderate real-world risk despite its relatively modest CVSS score of 6.1. The attack vector is network-accessible and requires no authentication, broadening the potential attacker pool; however, the mandatory user interaction requirement (clicking a crafted link) significantly reduces the likelihood of opportunistic exploitation. The scope change (S:C) indicates potential impact beyond the vulnerable component itself, with confidentiality and integrity both affected at low severity levels (C:L/I:L). EPSS data not provided in input, limiting probability assessment. Notably, this is a client-side-assisted attack rather than pure remote exploitation-an attacker must socially engineer an authenticated dashboard user. The SSRF primitive itself is valuable; an attacker could pivot to internal resources, exfiltrate data, or trigger actions on backend systems reachable from the Nexus Dashboard's network position. Organizations with Nexus Dashboard exposed to untrusted users or where phishing campaigns are plausible should prioritize patching, while those with internal-only access and strict user controls may defer. |
| Exploit ScenarioDerived | An attacker crafts a phishing email or malicious webpage containing a link to the Nexus Dashboard with embedded SSRF-payload parameters. An authenticated dashboard administrator or operator clicks the link while logged into Nexus Dashboard. The improper input validation allows the request to bypass security checks, and the Nexus Dashboard server makes an outbound request to an attacker-controlled server, exfiltrating session tokens, configuration data, or other sensitive information accessible from the dashboard's network context. No public exploit code or active exploitation has been confirmed at the time of this analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 01, 2026
Server-side request forgery in Cisco Nexus Dashboard and Nexus Dashboard Insights allows unauthenticated remote attackers to conduct SSRF attacks by tricking authenticated users into clicking malicious links, enabling arbitrary network requests from the affected device and potential execution of arbitrary script code or access to sensitive browser data. CVSS 6.1 with no public exploit or active exploitation confirmed at time of analysis.
RemediationAI
Customers should apply the security patch released by Cisco for both Nexus Dashboard and Nexus Dashboard Insights. Exact patched version numbers must be obtained from the official Cisco Security Advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-ssrf-NAen4O7r. As an interim mitigation pending patch application, restrict access to the Nexus Dashboard management interface to trusted networks and implement strict input filtering or web application firewall rules to block maliciously crafted HTTP requests. Additionally, conduct user awareness training to reduce the likelihood of authenticated users clicking suspicious links that might trigger SSRF exploitation.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability exploits improper input validation in HTTP request handling within Cisco Nexus Dashboard and Nexus Dashboard Insights (CWE-918: Server-Side Request Forgery). The affected products fail to adequately validate user-supplied input in specific HTTP requests, allowing attackers to inject crafted parameters that cause the server to make unintended requests to attacker-controlled endpoints. The SSRF attack vector operates at the network layer (AV:N) with low complexity (AC:L), requiring no prior authentication (PR:N) but necessitating user interaction (UI:R) such as clicking a malicious link. The resulting requests are sourced from the trusted network context of the Nexus Dashboard, bypassing network-based access controls and potentially reaching internal systems not directly exposed to the attacker.
Know when Cisco Nexus Dashboard gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary rating from Vendor (cisco) · only source for this CVE.
CVSS VectorVendor: cisco
DescriptionCVE.org
A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device.
This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by persuading an authenticated user of the device management interface to click a crafted link. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device to an attacker-controlled server. The attacker could then execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
More in Cisco Nexus Dashboard
View allCommand injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege creden
Improper access control in Cisco Nexus Dashboard, Cisco's data-center orchestration and management appliance, allows a n
Missing authentication for critical functions (CWE-306) in Cisco Nexus Dashboard allows unauthenticated, remote attacker
Cisco Nexus Dashboard versions 2.1 through 4.2.1 contain information exposure and insecure handling vulnerabilities that
Path traversal (CWE-22) in Cisco Nexus Dashboard lets a remote attacker holding valid low-privileged credentials (CVSS 3
Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authent
Cisco Nexus Dashboard configuration backup feature allows authenticated administrators to extract sensitive authenticati
Cisco Nexus Dashboard Insights metadata update feature allows authenticated administrators to write arbitrary files to t
Exploit-DB