CVE-2026-20326 – Cisco Nexus Dashboard
“When the console that runs your data center can be taken over, every switch behind it goes with it.”
Cisco has shipped a software hardening release for Cisco Nexus Dashboard that fixes four vulnerabilities found in an internal security review. Three are Critical and one is High. CVE-2026-20322 has a CVSS score of 9.9, Critical severity, and is an improper access control flaw that allows elevation of privilege. CVE-2026-20325 has a CVSS score of 9.9, Critical severity, and is a command injection flaw that allows remote code execution. CVE-2026-20326 has a CVSS score of 9.8, Critical severity, and is a missing authentication flaw on a critical function that allows elevation of privilege. CVE-2026-76409 has a CVSS score of 8.8, High severity, and is a path traversal flaw that allows elevation of privilege.
Nexus Dashboard is the central management plane for Cisco data center networks. An attacker who takes it over through command execution or privilege escalation controls the network fabric it manages. Apply this update the same day.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-306