Server-Side Request Forgery Vulnerability in Cisco Nexus Dashboard

CVE-2026-20041

What is CVE-2026-20041?

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights allows an unauthenticated remote attacker to exploit improper input validation in specific HTTP requests. By convincing an authenticated user of the device management interface to click a specially crafted link, the attacker can send arbitrary network requests from the affected device to their controlled server. This could lead to the execution of malicious script codes in the context of the affected interface or the exposure of sensitive browser-based information, posing a significant threat to network integrity and data confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References