CVE-2026-20360: Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure Handling
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20360 are related to information exposure and insecure handling issues that are grouped under the Common Weakness Enumeration (CWE) CWE-200.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs low-level privileges and can exploit the issue remotely without user interaction. The vulnerability is rated high severity with impacts to confidentiality, integrity, and availability.
Is this issue associated with a specific weakness category?
Yes. It is grouped under CWE-200, which covers information exposure issues. The advisory description also characterizes the affected issues as insecure handling.