References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ndhs-idv-Bk8VqEDc https://nvd.nist.gov/vuln/detail/CVE-2024-20490 https://cve.imfht.com/detail/CVE-2024-20490?lang=en https://cert.kenet.or.ke/cve-2024-20490-cisco-nexus-dashboard-fabric-controllernexus-dashboard-orchestrator-http-proxy https://github.com/advisories/GHSA-22cv-mr79-8p5c https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-ndhs-idv-Bk8VqEDc.html
Related VulnerabilitiesPoCCVE-2026-44343: WGDashboard < 4.3.2 - Unauthenticated File ReadPoCCVE-2026-59177: ESPHome Device Builder <1.0.10 - Unauthenticated Dashboard AccessPoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCCVE-2026-17594: Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format MismatchPoCCVE-2026-15733: WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd ReadPoCCVE-2026-53519: Nezha Dashboard < 2.0.13 - Path TraversalCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadPoCtrino-unauth-cluster: Trino Cluster Overview - Unauthenticated Dashboard ExposureKubernetes Dashboard /api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs 权限绕过漏洞(CVE-2018-18264)Nezha Dashboard /dashboard../data/config.yaml 目录遍历漏洞(CVE-2026-53519)PoClaravel-pulse-unauth: Laravel Pulse - Unauthenticated Dashboard AccessPoCpuppetdb-dashboard-unauth: PuppetDB Dashboard - Unauthenticated Access