EUVD-2026-81127
GHSA-gjgv-477q-32vr
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-200 information exposure over the network with low-privilege auth drives AV:N/PR:L and C:H; the vendor's I:H/A:H exceed a pure disclosure weakness, so I:L/A:N assessed.
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20360 are related to information exposure and insecure handling issues that are grouped under the Common Weakness Enumeration (CWE) CWE-200.
AnalysisAI
Cisco Nexus Dashboard versions 2.1 through 4.2.1 contain information exposure and insecure handling vulnerabilities that allow authenticated low-privileged remote attackers to access sensitive information and potentially cause limited integrity impact. The flaws are addressed in a software hardening release and require network access to the management interface; no public exploit code exists at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires network reachability to the Cisco Nexus Dashboard management interface and a valid low-privilege authenticated session (PR:L) - this is not an unauthenticated flaw, which meaningfully limits exposure to insiders or attackers who have already obtained credentials. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are mixed and lean toward moderate real-world urgency rather than emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the software hardening release referenced in Cisco advisory cisco-sa-hardening-ndw1-psFvnrg; specific fixed versions are listed there. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Cisco Nexus Dashboard instance and confirm which run versions 2.1 through 4.2.1; for any that do, block management-interface access from general user networks, corporate Wi-Fi, and the internet, permitting only hardened jump hosts on a dedicated management VLAN, and rotate credentials and API tokens for accounts that can reach the management plane. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cisco Nexus Dashboard
View allCommand injection (CWE-77) in Cisco Nexus Dashboard allows a remote, authenticated attacker holding low-privilege creden
Improper access control in Cisco Nexus Dashboard, Cisco's data-center orchestration and management appliance, allows a n
Missing authentication for critical functions (CWE-306) in Cisco Nexus Dashboard allows unauthenticated, remote attacker
Path traversal (CWE-22) in Cisco Nexus Dashboard lets a remote attacker holding valid low-privileged credentials (CVSS 3
Cisco Nexus Dashboard is affected by multiple SQL injection vulnerabilities (CWE-89) that can be triggered by an authent
Cisco Nexus Dashboard configuration backup feature allows authenticated administrators to extract sensitive authenticati
Cisco Nexus Dashboard Insights metadata update feature allows authenticated administrators to write arbitrary files to t
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today