CVE-2026-20042

MEDIUM 6.5

Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypted backup files. An attacker with a valid backup file and encryption password from an affected device could decrypt the backup file. The attacker could then use the authentication details in the backup file to access internal-only APIs on the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

CWE	CWE-295
Vendor	cisco
Product	cisco nexus dashboard
Ecosystems	Networking
Industries	NetworkingTelecommunications
Published	Apr 1, 2026
Last Updated	Apr 2, 2026

Stay Ahead of the Next One

Get instant alerts for cisco cisco nexus dashboard

Be the first to know when new medium vulnerabilities affecting cisco cisco nexus dashboard are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

Cisco / Cisco Nexus Dashboard

1.1(3e) 1.1(3c) 1.1(3d) 1.1(0d) 1.1(2i) 2.0(1b) 1.1(2h) 1.1(0c) 1.1(3f) 2.1(1d) 2.1(1e) 2.0(2g) 2.0(2h) 2.1(2d) 2.0(1d) 2.2(1h) 2.2(1e) 2.2(2d) 2.1(2f) 2.3(1c) 2.3(2b) 2.3(2c) 2.3(2d) 2.3(2e) 3.0(1f) 3.0(1i) 3.1(1k) 3.1(1l) 3.2(1e) 3.2(1i) 3.3(1a) 3.3(1b) 3.3(2b) 4.0(1i) 3.3(2g) 3.2(2f) 3.2(2g) 3.2(2m) 3.1(1n) 4.1(1g)

References

NVD ↗ CVE.org ↗ EPSS Data ↗

sec.cloudapps.cisco.com: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-cbid-5YqkOSHu