CVE-2026-20361

HighCVSS 8.8/10Last modified Sep 18, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20361 are related to SQL injection issues that are grouped under the Common Weakness Enumeration (CWE) CWE-89.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Sep 16, 2026
Last modified: Sep 18, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-203627.2A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-sid CVE-2026-20378.8GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to CVE-2026-20389.8GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authe CVE-2026-20399.8GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass auth CVE-2026-20407.3PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local CVE-2026-204017.5In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected CVE-2026-204026.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connec CVE-2026-204036.5In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected CVE-2026-204046.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connec CVE-2026-204056.5In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected CVE-2026-204066.5In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected CVE-2026-204079.3In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privil