Cisco Nexus Dashboard vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76409 are related to improper limitation of a pathname issues that are grouped under the Common Weakness Enumeration (CWE) CWE-22.

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20360 are related to information exposure and insecure handling issues that are grouped under the Common Weakness Enumeration (CWE) CWE-200.

As part of Cisco's internal security review, the Cisco Nexus Dashboard engineering team conducted a comprehensive analysis that resulted in a software hardening release. The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues grouped under CWE-89.

Cisco Nexus Dashboard engineering team conducted a comprehensive internal security review, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20326 are related to missing authentication for critical functions, grouped under CWE-306.

Cisco Nexus Dashboard engineering team conducted a comprehensive internal security review, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command, grouped under CWE-77.

Vulnerability in Cisco Nexus Dashboard is due to improper access control issues (CWE-284). It was discovered during an internal security review and addressed in a software hardening release.

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This issue exists because authentication details are included in the encrypted backup files.