GCVE-110-NCSC-2026-105

Advisory PublishedCVSS 6.1/10

Vulnetix · Advisory published April 3, 2026

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights allows unauthenticated remote attackers to perform server-side request forgery (SSRF) via improper input validation, enabling arbitrary network requests and script execution.

Download JSON Open in Console

Weaknesses (CWE)

CWE-918Server-Side Request Forgery (SSRF)CWE-295Improper Certificate ValidationCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Risk Scores

CVSS 3.1

6.1/10

Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
Cisco	vers:unknown/*	—	—

Aliases

CVE-2026-20041 CVE-2026-20042 CVE-2026-20174

References

advisory

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON