EUVD-2026-81102
GHSA-f725-hx4h-h3g2
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Authenticated (PR:L) network command injection yielding OS-level execution justifies C:H/I:H/A:H; S:C is defensible as Nexus Dashboard orchestrates and impacts the managed fabric beyond the vulnerable component.
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-77.
AnalysisAI
Command injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege credentials to inject and execute arbitrary commands, carrying a vendor-assigned CVSS of 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with high confidentiality, integrity, and availability impact and a Scope:Changed rating. The flaw was disclosed as one of multiple issues fixed in a grouped Cisco internal 'hardening release' advisory (cisco-sa-hardening-ndw1-psFvnrg) rather than a single externally reported CVE, so specific exploit prerequisites and exact affected version boundaries should be confirmed against that advisory's fixed-release table. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires authenticated access to the Cisco Nexus Dashboard management interface (PR:L) - an attacker must already possess valid low-privilege credentials or a session, which is the primary limiting factor. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a vendor-asserted 9.9 Critical (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) command-injection flaw (CWE-77) in Cisco Nexus Dashboard, disclosed as part of a grouped internal 'hardening release' advisory (cisco-sa-hardening-ndw1-psFvnrg) rather than an externally-reported single-issue advisory. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the hardened Nexus Dashboard release identified in Cisco's advisory cisco-sa-hardening-ndw1-psFvnrg (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ndw1-psFvnrg), matching your deployed version against the fixed-release table before upgrading; patch availability is confirmed per vendor advisory, but no exact fixed version string is provided in the available data, so do not assume a version number without checking the Cisco table. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Cisco Nexus Dashboard instances, restrict management interface access to trusted administrative networks, enforce multi-factor authentication and least privilege for all accounts, disable unnecessary low-privilege accounts, and enable detailed command and audit logging. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cisco Nexus Dashboard
View allImproper access control in Cisco Nexus Dashboard, Cisco's data-center orchestration and management appliance, allows a n
Missing authentication for critical functions (CWE-306) in Cisco Nexus Dashboard allows unauthenticated, remote attacker
Cisco Nexus Dashboard versions 2.1 through 4.2.1 contain information exposure and insecure handling vulnerabilities that
Path traversal (CWE-22) in Cisco Nexus Dashboard lets a remote attacker holding valid low-privileged credentials (CVSS 3
Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authent
Cisco Nexus Dashboard configuration backup feature allows authenticated administrators to extract sensitive authenticati
Cisco Nexus Dashboard Insights metadata update feature allows authenticated administrators to write arbitrary files to t
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today