Search CVEs, research… / diras.sa

CVE-2026-20326: missing authentication in Cisco Cisco Nexus Dashboard

Unauthenticated remote attackers can access critical functions on Cisco Nexus Dashboard, enabling full compromise of affected systems. CVE-2026-20326 is a missing-authentication weakness (CWE-306) affecting multiple 2.x Nexus Dashboard releases, including builds such as 2.1(1d), 2.1(1e), 2.1(2d), 2.2(1h), 2.2(1e), 2.2(2d), 2.1(2f), 2.3(1c), 2.3(2b) and 2.3(2c). An attacker needs network access to the Nexus Dashboard instance and does not require valid credentials or user interaction to exploit the issue.

Published Updated Source: CVE Program, NVD, FIRST EPSS

CVSS 3.1
9.8CRITICAL
EPSS
0.00387
CWE
CWE-306
KEV DUE DATE
Not listed
PATCH
Not yet

DIRAS TAKE

Urgent: treat systems running affected Nexus Dashboard builds as high risk because critical functions lack authentication and no fixed software is listed; immediately restrict network exposure to management interfaces and follow Cisco's guidance.

What is CVE-2026-20326?

Unauthenticated remote attackers can access critical functions on Cisco Nexus Dashboard, enabling full compromise of affected systems. CVE-2026-20326 is a missing-authentication weakness (CWE-306) affecting multiple 2.x Nexus Dashboard releases, including builds such as 2.1(1d), 2.1(1e), 2.1(2d), 2.2(1h), 2.2(1e), 2.2(2d), 2.1(2f), 2.3(1c), 2.3(2b) and 2.3(2c). An attacker needs network access to the Nexus Dashboard instance and does not require valid credentials or user interaction to exploit the issue. The weakness is classified as CWE-306 (Missing Authentication for Critical Function).

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Which versions of Cisco Cisco Nexus Dashboard are affected?

BRANCHAFFECTEDFIXED
2.x2.1(1d)
2.x2.1(1e)
2.x2.1(2d)
2.x2.2(1h)
2.x2.2(1e)
2.x2.2(2d)
2.x2.1(2f)
2.x2.3(1c)
2.x2.3(2b)
2.x2.3(2c)

Is CVE-2026-20326 being exploited?

There are no public reports of exploitation as of 2026-09-30.

How to fix CVE-2026-20326

  1. Follow Cisco's advisory and hardening guidance for Nexus Dashboard immediately.
  2. Restrict network access to the Nexus Dashboard management interface to trusted hosts and management VLANs.
  3. Monitor system and network logs for unusual admin-level activity and establish host/network-based detections for unauthorized access attempts.
  4. Plan and test a rapid upgrade path and apply vendor fixes as soon as Cisco releases patched software.

Frequently asked questions

Is CVE-2026-20326 being actively exploited?

There are no public reports of exploitation of CVE-2026-20326 as of 2026-09-30.

Which Cisco Nexus Dashboard versions are affected by CVE-2026-20326?

Multiple Nexus Dashboard 2.x builds are listed as affected, including 2.1(1d), 2.1(1e), 2.1(2d), 2.2(1h), 2.2(1e), 2.2(2d), 2.1(2f), 2.3(1c), 2.3(2b) and 2.3(2c).

Is there a patch for CVE-2026-20326?

No fixed versions are listed for this vulnerability; Cisco has not published a patched release in the affected list as of 2026-09-30.

Does CVE-2026-20326 require authentication?

No — the weakness is a missing authentication issue in Cisco Nexus Dashboard, so exploitation does not require valid credentials.

References