PT-2026-29549 · Cisco · Cisco Nexus Dashboard+1

Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-20041

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights (affected versions not specified)

Description A flaw exists in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights that could allow a remote attacker to perform a server-side request forgery (SSRF) attack. This is caused by insufficient validation of HTTP requests. An attacker could exploit this by tricking an authenticated user into clicking a specially crafted link. A successful exploit could allow the attacker to send arbitrary network requests from the affected device to a server controlled by the attacker, potentially leading to the execution of arbitrary script code or access to sensitive browser information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-04794

CVE-2026-20041

Affected Products

Cisco Nexus Dashboard

Cisco Nexus Dashboard Insights

References · 3

• https://bdu.fstec.ru/vul/2026-04794 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-20041 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-ssrf-NAen4O7r · Vendor Advisory