CVE-2026-20041
Cisco Nexus Dashboard Server Side Request Forgery Vulnerability
Description
A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by persuading an authenticated user of the device management interface to click a crafted link. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected device to an attacker-controlled server. The attacker could then execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
Weakness: CWE-918
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Nexus Dashboard | Network & Security Management | cna-assigner |
Vendor-reported products (2)
- Cisco · Cisco Nexus Dashboard
- Cisco · Cisco Nexus Dashboard Insights
Vendor advisory
Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability
Cisco’s rating: Medium (advisory CVSS 6.1) · Published Apr 1, 2026
Bug IDs: CSCwp20812 , CSCwq47518
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from