CVE-2026-76409 is a path traversal vulnerability (CWE-22) in Cisco Nexus Dashboard 4.2.1. It arises from improper limitation of pathname inputs, enabling an attacker with limited privileges to traverse directories beyond the intended restricted path. This vulnerability was discovered during Cisco's internal security review and is part of a set of issues addressed in a software hardening release. The CVSS v3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No known public exploits exist currently.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to access or modify sensitive files outside the intended directory boundaries, resulting in full compromise of confidentiality, integrity, and availability of the affected system. This could lead to unauthorized data disclosure, data tampering, or denial of service conditions on Cisco Nexus Dashboard 4.2.1.

Cisco has released a software hardening update that addresses this vulnerability along with others discovered during their internal security review. Users of Cisco Nexus Dashboard version 4.2.1 should apply the official update provided by Cisco to remediate this issue. Patch status is not explicitly confirmed in the provided data; therefore, users should consult Cisco's official advisory for the latest remediation guidance.