SQL Injection Vulnerabilities in Cisco Nexus Dashboard

CVE-2026-20361

What is CVE-2026-20361?

Cisco's Nexus Dashboard has been identified with vulnerabilities related to SQL injection, specifically classified under the Common Weakness Enumeration as CWE-89. These vulnerabilities were uncovered during a thorough internal security review by the Cisco engineering team, leading to a proactive software hardening initiative aimed at mitigating potential risks. The reported SQL injection issues could allow an attacker to manipulate database queries, posing a threat to the integrity and confidentiality of data. Cisco recommends immediate action to update to secure versions to protect against these vulnerabilities.

References