Critical Alert 4 Active Exploits Detected Today

CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability →
CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability →
CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability →
CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

← Back to CVE List

CVE-2026-76409NVD

Vulnerability Summary

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76409 are related to improper limitation of a pathname issues that are grouped under the Common Weakness Enumeration (CWE) CWE-22.
Severity Level
HIGH(8.8)
Published Date
Sep 16, 2026
Last Modified
Sep 18, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.50%Probability
Root Weakness (CWE)
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v3.1 Base Metrics — Score 8.8 (HIGH)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

Affected & Patched Versions

Affected Versions
  • Cisco Cisco Nexus Dashboard >= 2.1(1d)
  • Cisco Cisco Nexus Dashboard >= 2.1(1e)
  • Cisco Cisco Nexus Dashboard >= 2.1(2d)
  • Cisco Cisco Nexus Dashboard >= 2.2(1h)
  • Cisco Cisco Nexus Dashboard >= 2.2(1e)
  • Cisco Cisco Nexus Dashboard >= 2.2(2d)
  • Cisco Cisco Nexus Dashboard >= 2.1(2f)
  • Cisco Cisco Nexus Dashboard >= 2.3(1c)
  • Cisco Cisco Nexus Dashboard >= 2.3(2b)
  • Cisco Cisco Nexus Dashboard >= 2.3(2c)
  • Cisco Cisco Nexus Dashboard >= 2.3(2d)
  • Cisco Cisco Nexus Dashboard >= 2.3(2e)
  • Cisco Cisco Nexus Dashboard >= 3.0(1f)
  • Cisco Cisco Nexus Dashboard >= 3.0(1i)
  • Cisco Cisco Nexus Dashboard >= 3.1(1k)
  • Cisco Cisco Nexus Dashboard >= 3.1(1l)
  • Cisco Cisco Nexus Dashboard >= 3.2(1e)
  • Cisco Cisco Nexus Dashboard >= 3.2(1i)
  • Cisco Cisco Nexus Dashboard >= 3.3(1a)
  • Cisco Cisco Nexus Dashboard >= 3.3(1b)
  • Cisco Cisco Nexus Dashboard >= 3.3(2b)
  • Cisco Cisco Nexus Dashboard >= 4.0(1i)
  • Cisco Cisco Nexus Dashboard >= 3.3(2g)
  • Cisco Cisco Nexus Dashboard >= 3.2(2f)
  • Cisco Cisco Nexus Dashboard >= 3.2(2g)
  • Cisco Cisco Nexus Dashboard >= 3.2(2m)
  • Cisco Cisco Nexus Dashboard >= 3.1(1n)
  • Cisco Cisco Nexus Dashboard >= 4.1(1g)
  • Cisco Cisco Nexus Dashboard >= 4.2.1
Patched Versions
Not provided by cveorg for this CVE.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.