Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by persuading an authenticated user of the device management interface to click a crafted link. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device to an attacker-controlled server. The attacker could then execute arbitrary script code in the context of the affected interface or access sensitive browser-based information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20041US | — | — | ||
A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack t… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- Cisco Support and Downloadsexternal
- Cisco Technical Assistance Center (TAC)external
- the advisoriesexternal
remediations (54)
- Fixed1.1(0c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(0d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(2h)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(2i)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(3c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(3d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(3e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed1.1(3f)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.0(1b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.0(1d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.0(2g)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.0(2h)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.1(1d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.1(1e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.1(2d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.1(2f)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.2(1e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.2(1h)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.2(2d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.2.2.125
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.2.2.126
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(1c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(2b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(2c)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(2d)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed2.3(2e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.0(1f)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.0(1i)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.1(1k)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.1(1l)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.1(1n)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.2(1e)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.2(1i)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.2(2f)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.2(2m)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.3(1a)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.3(1b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.3(2b)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed3.3(2g)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed4.0(1i)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed4.1(1g)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed5.0.1.150
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed5.0.1.154
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed5.1.0.131
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed5.1.0.135
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0.1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.0.2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.1.1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.1.2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.1.3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.2.1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.2.2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.3.1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed6.4.1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan