EUVD-2026-81115
GHSA-7qx8-g893-529w
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable path traversal exploitable by any authenticated low-privilege user (PR:L); arbitrary file read/write yields full C/I/A impact; scope unchanged per Cisco convention though traversal arguably crosses trust boundaries.
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76409 are related to improper limitation of a pathname issues that are grouped under the Common Weakness Enumeration (CWE) CWE-22.
AnalysisAI
Path traversal (CWE-22) in Cisco Nexus Dashboard lets a remote attacker holding valid low-privileged credentials (CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N) send crafted requests that escape intended directory boundaries, yielding high confidentiality, integrity, and availability impact for an overall base score of 8.8. Cisco addressed this and several other internally discovered flaws as a group in a single software hardening release rather than documenting each issue individually, so the specific vulnerable feature or endpoint is not publicly enumerated. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a valid low-privileged authenticated session on Cisco Nexus Dashboard (PR:L) and network reachability to the management interface (AV:N); no user interaction is needed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely serious vulnerability by CVSS metrics (8.8 High) but with important caveats. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Cisco states that a software hardening release resolves this and the other internally discovered issues, so the primary action is to upgrade Cisco Nexus Dashboard to the fixed build identified in the advisory cisco-sa-hardening-ndw1-psFvnrg (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ndw1-psFvnrg); because the provided data does not enumerate an exact fixed version number, verify the target release against the advisory and Cisco's software download pages before scheduling maintenance, and treat any build at or below 4.2.1 as unpatched unless the advisory states otherwise. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately restrict access to Cisco Nexus Dashboard management interfaces to trusted IP ranges, enforce multi-factor authentication for all accounts, and audit low-privileged accounts for suspicious activity, disabling any unnecessary ones. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cisco Nexus Dashboard
View allCommand injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege creden
Improper access control in Cisco Nexus Dashboard, Cisco's data-center orchestration and management appliance, allows a n
Missing authentication for critical functions (CWE-306) in Cisco Nexus Dashboard allows unauthenticated, remote attacker
Cisco Nexus Dashboard versions 2.1 through 4.2.1 contain information exposure and insecure handling vulnerabilities that
Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authent
Cisco Nexus Dashboard configuration backup feature allows authenticated administrators to extract sensitive authenticati
Cisco Nexus Dashboard Insights metadata update feature allows authenticated administrators to write arbitrary files to t
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today