CVE-2026-76409 - Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a Pathname

Back Back to CVE browser

HIGH

Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a Pathname

Published Sep 16, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.53%

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76409 are related to improper limitation of a pathname issues that are grouped under the Common Weakness Enumeration (CWE) CWE-22.

Affected products

Vendor Cisco Product Cisco Nexus Dashboard Default
n/a
- Version
  2.1(1d)
  Status
  affected
  Constraints
  -
- Version
  2.1(1e)
  Status
  affected
  Constraints
  -
- Version
  2.1(2d)
  Status
  affected
  Constraints
  -
- Version
  2.1(2f)
  Status
  affected
  Constraints
  -
- Version
  2.2(1e)
  Status
  affected
  Constraints
  -
- Version
  2.2(1h)
  Status
  affected
  Constraints
  -
- Version
  2.2(2d)
  Status
  affected
  Constraints
  -
- Version
  2.3(1c)
  Status
  affected
  Constraints
  -
- Version
  2.3(2b)
  Status
  affected
  Constraints
  -
- Version
  2.3(2c)
  Status
  affected
  Constraints
  -
- Version
  2.3(2d)
  Status
  affected
  Constraints
  -
- Version
  2.3(2e)
  Status
  affected
  Constraints
  -
- Version
  3.0(1f)
  Status
  affected
  Constraints
  -
- Version
  3.0(1i)
  Status
  affected
  Constraints
  -
- Version
  3.1(1k)
  Status
  affected
  Constraints
  -
- Version
  3.1(1l)
  Status
  affected
  Constraints
  -
- Version
  3.1(1n)
  Status
  affected
  Constraints
  -
- Version
  3.2(1e)
  Status
  affected
  Constraints
  -
- Version
  3.2(1i)
  Status
  affected
  Constraints
  -
- Version
  3.2(2f)
  Status
  affected
  Constraints
  -
- Version
  3.2(2g)
  Status
  affected
  Constraints
  -
- Version
  3.2(2m)
  Status
  affected
  Constraints
  -
- Version
  3.3(1a)
  Status
  affected
  Constraints
  -
- Version
  3.3(1b)
  Status
  affected
  Constraints
  -
- Version
  3.3(2b)
  Status
  affected
  Constraints
  -
- Version
  3.3(2g)
  Status
  affected
  Constraints
  -
- Version
  4.0(1i)
  Status
  affected
  Constraints
  -
- Version
  4.1(1g)
  Status
  affected
  Constraints
  -
- Version
  4.2.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco Nexus Dashboard

n/a

Version	Status	Constraints
2.1(1d)	affected	-
2.1(1e)	affected	-
2.1(2d)	affected	-
2.1(2f)	affected	-
2.2(1e)	affected	-
2.2(1h)	affected	-
2.2(2d)	affected	-
2.3(1c)	affected	-
2.3(2b)	affected	-
2.3(2c)	affected	-
2.3(2d)	affected	-
2.3(2e)	affected	-
3.0(1f)	affected	-
3.0(1i)	affected	-
3.1(1k)	affected	-
3.1(1l)	affected	-
3.1(1n)	affected	-
3.2(1e)	affected	-
3.2(1i)	affected	-
3.2(2f)	affected	-
3.2(2g)	affected	-
3.2(2m)	affected	-
3.3(1a)	affected	-
3.3(1b)	affected	-
3.3(2b)	affected	-
3.3(2g)	affected	-
4.0(1i)	affected	-
4.1(1g)	affected	-
4.2.1	affected	-