PT-2026-29549 · Cisco · Cisco Nexus Dashboard+1

Publicado 2026-04-01 · Atualizado 2026-04-01 · CVE-2026-20041

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights (affected versions not specified)

Description A flaw exists in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights that could allow a remote attacker to perform a server-side request forgery (SSRF) attack. This is caused by insufficient validation of HTTP requests. An attacker could exploit this by tricking an authenticated user into clicking a specially crafted link. A successful exploit could allow the attacker to send arbitrary network requests from the affected device to a server controlled by the attacker, potentially leading to the execution of arbitrary script code or access to sensitive browser information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

BDU:2026-04794

CVE-2026-20041

Produtos afetados

Cisco Nexus Dashboard

Cisco Nexus Dashboard Insights

Referências · 3

• https://bdu.fstec.ru/vul/2026-04794 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-20041 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-ssrf-NAen4O7r · Aviso do Fabricante