CVE-2026-20325

🎯 CVE-2026-20325 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-20325 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Com

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-77.

Klassifikation & Betroffenheit:

CWE-77 Cisco Cisco Nexus Dashboard 3.1(1n)Cisco Nexus Dashboard 3.3(1a)Cisco Nexus Dashboard 2.2(1e)Cisco Nexus Dashboard 2.2(1h)Cisco Nexus Dashboard 3.2(2g)Cisco Nexus Dashboard 2.1(2d)Cisco Nexus Dashboard 3.0(1f)Cisco Nexus Dashboard 2.3(2b)

Improper Neutralization of Special Elements used in a Command 🎯 High

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

🛡️ Empfohlene Mitigation: If at all possible, use library calls rather than external processes to recreate the desired functionality.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-15 · Command Delimiters (High) CAPEC-40 · Manipulating Writeable Terminal Devices (Very High) CAPEC-43 · Exploiting Multiple Input Interpretation… (High) CAPEC-75 · Manipulating Writeable Configuration Fil… (Very High) CAPEC-76 · Manipulating Web Input to File System Ca… (Very High) CAPEC-136 · LDAP Injection (High) CAPEC-183 · IMAP/SMTP Command Injection (Medium) CAPEC-248 · Command Injection (High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-79846 10.0 CVE-2026-114575 10.0 CVE-2026-110957 10.0 CVE-2026-110536 10.0 CVE-2026-109110 10.0

🇩🇪 BSI-Sicherheitshinweise: BSI · hoch · Cisco Nexus Dashboard: Mehrere Schwachstellen ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

🔗 sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvi…

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 09/2026

Heute 06.11.

CVSS-Vektor-Analyse: 9.9

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Gering

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CNA-Bewertung (cisco): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Veröffentlicht:16.09.2026

Aktualisiert:18.09.2026 15:17

Assigner (CNA):cisco

EUVD-ID:EUVD-2026-81102

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-77 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

Tier	CVEs	Anteil
≥90 %	785	0,2 %
≥50 %	3.572	0,9 %
≥10 %	23.058	5,6 %
<10 %	380.696	93,3 %

Tier

CVEs

Anteil

≥90 %

785

0,2 %

≥50 %

3.572

0,9 %

≥10 %

23.058

5,6 %

<10 %

380.696

93,3 %

9.9 CRITICAL

EPSS

0.5%

CVE-2026-20325 🌐 Netzwerk (Remote) 🔑 Geringe Nutzerrechte nötig

Cisco

CVE-2026-20325 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command issue that are grouped under the Com

CWE-77 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

vor 1 Monat ↻ vor 1 Monat

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub