Is CVE-2026-20322 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-20322 being exploited in the wild.

How severe is CVE-2026-20322?

Critical severity, with a CVSS score of 9.9, published 16 September 2026.

Which products and versions are affected?

Cisco Nexus Dashboard 4.2 and earlier.

Is there a fix for CVE-2026-20322?

A patch was published on 2026-09-16: Fixed in Nexus Dashboard 4.3.1.175 and later Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-20322 attacked?

It is attacked over the network.

Am I affected by CVE-2026-20322?

Check whether you run Cisco Nexus Dashboard at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-20322: Cisco Nexus Dashboard improper access control

CVE-2026-20322 · Severity: critical · CVSS 9.9 · Published 2026-09-16

Cisco Nexus Dashboard, a network management platform, contains multiple critical improper access control vulnerabilities discovered during internal security review. An authenticated attacker with basic user privileges can gain unauthorized access to sensitive functions and data across the entire system, potentially compromising network infrastructure, extracting credentials, or executing unauthorized operations. The vulnerabilities affect all versions 4.2 and earlier, with patches available in version 4.3.1.175 and later.

Technologies: Cisco Nexus Dashboard. Vendors: Cisco.

Quick answers

Is CVE-2026-20322 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-20322 being exploited in the wild.
How severe is CVE-2026-20322?: Critical severity, with a CVSS score of 9.9, published 16 September 2026.
Which products and versions are affected?: Cisco Nexus Dashboard 4.2 and earlier.
Is there a fix for CVE-2026-20322?: A patch was published on 2026-09-16: Fixed in Nexus Dashboard 4.3.1.175 and later Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-20322 attacked?: It is attacked over the network.
Am I affected by CVE-2026-20322?: Check whether you run Cisco Nexus Dashboard at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-20322 represents a grouping of internally discovered vulnerabilities classified under CWE-284 (improper access control) affecting authorization, authentication, privilege escalation, and bypass mechanisms. The vulnerability is network-accessible and requires low-privilege authentication (PR:L) with no user interaction (UI:N), allowing an authenticated attacker to achieve high impact across confidentiality, integrity, and availability with changed scope (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). This is accompanied by related CVEs covering command injection (CVE-2026-20325), missing authentication (CVE-2026-20326), information disclosure (CVE-2026-20360), SQL injection (CVE-2026-20361), and path traversal (CVE-2026-76409). Fixes are available; no workarounds exist and no public exploitation has been reported.

Affected products

Cisco Nexus Dashboard 4.2 and earlier

Timeline

2026-09-16: disclosed
2026-09-16: patched: Fixed in Nexus Dashboard 4.3.1.175 and later

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ndw1-psFvnrg

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.