Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2026-20325

Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-77.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Nexus Dashboard

Default version status: unknown

  • 2.1(1d)affected
  • 2.1(1e)affected
  • 2.1(2d)affected
  • 2.2(1h)affected
  • 2.2(1e)affected
  • 2.2(2d)affected
  • 2.1(2f)affected
  • 2.3(1c)affected
  • 2.3(2b)affected
  • 2.3(2c)affected
  • 2.3(2d)affected
  • 2.3(2e)affected
  • 3.0(1f)affected
  • 3.0(1i)affected
  • 3.1(1k)affected
  • 3.1(1l)affected
  • 3.2(1e)affected
  • 3.2(1i)affected
  • 3.3(1a)affected
  • 3.3(1b)affected
  • 3.3(2b)affected
  • 4.0(1i)affected
  • 3.3(2g)affected
  • 3.2(2f)affected
  • 3.2(2g)affected
  • 3.2(2m)affected
  • 3.1(1n)affected
  • 4.1(1g)affected
  • 4.2.1affected

References