CVE-2026-20361 — Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection

Description (CNA)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Nexus Dashboard	affected 2.1(1d); affected 2.1(1e); affected 2.1(2d); affected 2.2(1h); affected 2.2(1e); affected 2.2(2d); affected 2.1(2f); affected 2.3(1c); affected 2.3(2b); affected 2.3(2c); affected 2.3(2d); affected 2.3(2e); affected 3.0(1f); affected 3.0(1i); affected 3.1(1k); affected 3.1(1l); affected 3.2(1e); affected 3.2(1i); affected 3.3(1a); affected 3.3(1b); affected 3.3(2b); affected 4.0(1i); affected 3.3(2g); affected 3.2(2f); affected 3.2(2g); affected 3.2(2m); affected 3.1(1n); affected 4.1(1g); affected 4.2.1

Vendor / product

Versions

Cisco / Cisco Nexus Dashboard

affected 2.1(1d); affected 2.1(1e); affected 2.1(2d); affected 2.2(1h); affected 2.2(1e); affected 2.2(2d); affected 2.1(2f); affected 2.3(1c); affected 2.3(2b); affected 2.3(2c); affected 2.3(2d); affected 2.3(2e); affected 3.0(1f); affected 3.0(1i); affected 3.1(1k); affected 3.1(1l); affected 3.2(1e); affected 3.2(1i); affected 3.3(1a); affected 3.3(1b); affected 3.3(2b); affected 4.0(1i); affected 3.3(2g); affected 3.2(2f); affected 3.2(2g); affected 3.2(2m); affected 3.1(1n); affected 4.1(1g); affected 4.2.1

CWE

CWE-89

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ndw1-psFvnrg

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.