Dismissed
(no matching packages found)
Permalink
CVE-2026-20361
8.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
Activity log
- Created & dismissed (no matching packages found) suggestion
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.
References
Affected products
Cisco Nexus Dashboard
- ==3.2(2f)
- ==2.1(2f)
- ==2.3(1c)
- ==3.2(1e)
- ==2.2(1e)
- ==2.3(2b)
- ==2.3(2e)
- ==2.3(2c)
- ==3.0(1i)
- ==2.1(1e)
- ==2.1(2d)
- ==4.2.1
- ==3.3(2b)
- ==3.2(1i)
- ==3.2(2g)
- ==2.3(2d)
- ==2.2(2d)
- ==3.1(1k)
- ==3.1(1n)
- ==3.3(1b)
- ==3.2(2m)
- ==3.1(1l)
- ==2.1(1d)
- ==2.2(1h)
- ==4.1(1g)
- ==4.0(1i)
- ==3.3(2g)
- ==3.3(1a)
- ==3.0(1f)