Cisco Nexus Dashboard: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Cisco Nexus Dashboard ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen und um…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-34316 linked CVEs
Open advisory with all CVEs
More on Dashboard
Other advisories
- Not ratedosv:CVE-2026-55422conda-forge.org: Stored DOM XSS via unsanitized dangerouslySetInnerHTML in the status dashboard
- Not ratedosv:CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous tools
- Not ratedosv:CVE-2026-114092Trigger.dev before 4.5.0 Missing Authentication in Dashboard Run Replay Action
- Not ratedosv:CVE-2026-114070Trigger.dev 4.5.0 before 4.6.0 Dashboard Agent User Token Disclosure via Session Records
- MediumCVE-2026-100394Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant in github.com/nezhahq/nezha
- MediumCVE-2026-112101BlackBeltTechnology Pi-agent-dashboard: fehlerhafte Herkunftsprüfung
- Not ratedosv:CVE-2026-112101BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validation
- MediumCVE-2026-112101BlackBeltTechnology Pi-agent-dashboard: fehlerhafte Herkunftsprüfung
Other news entries
- Your enterprise doesn’t need six BOM programs. It needs one evidence graphNewsCSO Online
- Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus DashboardNewsSecurityWeek
- Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCENewsThe Hacker News
- ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was LimitedNewsSecurityWeek
- New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes TokensNewsThe Hacker News
- Recent DShield SIEM Update, (Tue, Jul 14th)NewsSANS ISC Diary
- Some Claude Chats Are Searchable on GoogleNewsSchneier on Security
- Cisco Nexus Dashboard Insights Arbitrary File Write VulnerabilityNewsCisco PSIRT
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3431
ID