CVE-2026-20042— Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-20042
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypted backup files. An attacker with a valid backup file and encryption password from an affected device could decrypt the backup file. The attacker could then use the authentication details in the backup file to access internal-only APIs on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
证书验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Nexus Dashboard 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus Dashboard是美国思科（Cisco）公司的一个单一控制台。能够简化数据中心网络的运营和管理。 Cisco Nexus Dashboard存在信任管理问题漏洞，该漏洞源于加密备份文件中包含身份验证详细信息，可能导致攻击者访问敏感信息并执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Nexus Dashboard | 1.1(3e) | - |
II. Public POCs for CVE-2026-20042
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20042
请登录查看更多情报信息。
Same Patch Batch · Cisco · 2026-04-01 · 16 CVEs total
| CVE-2026-20160 | 9.8 CRITICAL | Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability |
| CVE-2026-20093 | 9.8 CRITICAL | Cisco Integrated Management Controller Authentication Bypass Vulnerability |
| CVE-2026-20094 | 8.8 HIGH | Cisco Integrated Management Controller Command Injection Vulnerability |
| CVE-2026-20155 | 8.0 HIGH | Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability |
| CVE-2026-20151 | 7.3 HIGH | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability |
| CVE-2026-20096 | 6.5 MEDIUM | Cisco Integrated Management Controller Command Injection Vulnerability |
| CVE-2026-20097 | 6.5 MEDIUM | Cisco Integrated Management Controller Remote Code Execution Vulnerability |
| CVE-2026-20095 | 6.5 MEDIUM | Cisco Integrated Management Controller Command Injection Vulnerability |
| CVE-2026-20085 | 6.1 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20041 | 6.1 MEDIUM | Cisco Nexus Dashboard Server Side Request Forgery Vulnerability |
| CVE-2026-20174 | 4.9 MEDIUM | Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability |
| CVE-2026-20090 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20089 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20087 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20088 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Nexus Dashboard
- CVE-2026-20174
Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerab - CVE-2026-20041
Cisco Nexus Dashboard Server Side Request Forgery Vulnerabil - CVE-2025-20348
Cisco Nexus Dashboard Unauthorized REST API Vulnerability - CVE-2025-20344
Cisco Nexus Dashboard Path Traversal Vulnerability - CVE-2025-20150
Cisco Nexus Dashboard Username Enumeration Vulnerability
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-295
V. Comments for CVE-2026-20042
No comments yet