Cisco NX-OS (Product): news timeline & CVEs

Cisco Patches a Dozen Critical Vulnerabilities

Cisco patched 35 flaws, including more than a dozen critical bugs, and reports no known exploitation.

Cisco patched 35 vulnerabilities, including more than a dozen critical-severity bugs, across Meraki, License On-Prem, NX-OS, and Application Policy Infrastructure Controller. Unauthenticated License On-Prem issues include unauthorized access (CVE-2026-20328) and denial of service (CVE-2026-76454). On NX-OS, CVE-2026-76471 and CVE-2026-76465 could let remote unauthenticated attackers run code as root or cause a denial of service, while three NGOAM flaws affect only Nexus 3000 and 9000 switches with that feature enabled. Cisco also fixed a publicly disclosed high-severity SSRF in Finesse, CVE-2026-20362, and said it is not aware of exploitation.

SecurityWeekOct 8, 15:28 UTC · 9h agoVulnerability CVE-2026-76464 CVE-2026-20328 CVE-2026-76454+14 CVEs

Cisco warns of critical flaws allowing Nexus switch takeover

Cisco disclosed five critical NX-OS flaws that can give root code execution on Nexus 3000 and 9000 switches.

Cisco disclosed five critical NX-OS flaws that could let an attacker run arbitrary code as root on standalone Nexus 3000 and Nexus 9000 switches, or crash processes and force a reload. The bugs, CVE-2026-76471, CVE-2026-76485, CVE-2026-76486, CVE-2026-76501, and CVE-2026-76465, require NX-API, NGOAM, or MPLS OAM to be enabled. Cisco found them internally and said it knew of no malicious exploitation. Separate Cisco License issues include CVE-2026-76482 at CVSS 10.0 and CVE-2026-76480 at CVSS 9.8, fixed in release 10-202609.

BleepingComputerOct 8, 15:26 UTC · 9h agoVulnerability CVE-2026-76471 CVE-2026-76485 CVE-2026-76486+6 CVEs

Cisco security advisory (AV26-1020)

Canada’s Cyber Centre urged updates after Cisco advisories hit Nexus, Meraki, NX-OS, UCS, and contact-center products.

Canadian Centre for Cyber Security alert AV26-1020, dated October 8, 2026, points to Cisco vulnerabilities in Nexus 3000 and 9000 switches, UCS fabric interconnects, multiple Meraki products, NX-OS, APIC, and contact-center software including Finesse, CCE, and CCX. Fixed releases are listed for several products, with some Meraki and contact-center updates scheduled into late 2026 and early 2027. The alert gives no CVE identifiers and does not report exploitation. Administrators are told to review Cisco’s advisories and apply updates as they become available.

Canadian Centre for Cyber SecurityOct 8, 14:49 UTC · 9h agoAdvisory 3 sources

Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root

Cisco disclosed three critical unauthenticated root code-execution flaws in Nexus 3000 and 9000 switches.

Cisco advisory cisco-sa-ngoam-rce-LWKQ4BU describes three critical NGOAM stack overflows in NX-OS on Nexus 3000 and 9000 Series switches running standalone mode. CVE-2026-76485, CVE-2026-76486, and CVE-2026-76501 are each scored CVSS 9.8 (CWE-121) and can be triggered by unauthenticated crafted IP packets, leading to root code execution or a device reload. CVE-2026-76485 needs only NGOAM; the others also require VXLAN EVPN overlay or SRv6, and ACI-mode Nexus 9000 plus Nexus 7000 are unaffected. Cisco says there is no workaround and no known exploitation, and recommends fixed releases, with disabling NGOAM or Live Protect shields only as interim measures.

GBHackersOct 8, 10:19 UTC · 14h agoVulnerability 5 sources CVE-2026-76485 CVE-2026-76486 CVE-2026-765011

Cisco NX-OS Software Control Plane Denial of Service Vulnerability

A Cisco NX-OS rate-limiting flaw lets remote attackers temporarily disrupt control-plane protocols with heavy traffic.

Cisco disclosed a denial-of-service vulnerability in NX-OS Software caused by rate limiting being improperly applied to some protocols. An unauthenticated remote attacker can send a high rate of UDP or TCP connections to a data-plane interface, exhausting resources and disrupting routing and control-plane protocols. Cisco says the condition clears without manual intervention once the traffic stops.

Cisco Security AdvisoriesOct 7, 16:00 UTC · 1d agoVulnerability 3 sources

Cisco NX-OS Software Security Hardening Release: October 2026

Cisco issued an October 2026 NX-OS hardening release for internally found flaws not known to be exploited.

Cisco published an October 2026 NX-OS security hardening release after an internal review found multiple vulnerabilities. The issues were discovered in internal testing and are not known to be actively exploited. Cisco grouped them by weakness class and assigned one CVE identifier to each class, then released software updates. The excerpt does not list the CVE identifiers.

Cisco Security Advisoriesupdated Oct 8, 14:49 UTC · 9h agofirst Oct 7, 16:00 UTC · 1d agoAdvisory 3 sources1

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Unauthenticated attackers can gain root code execution on Cisco NX-OS through crafted NX-API HTTP requests.

A vulnerability in the NX-API feature of Cisco NX-OS Software could let an unauthenticated remote attacker execute arbitrary code with root privileges or cause a denial of service. The flaw is insufficient validation of data sent to the NX-API, and exploitation uses a crafted HTTP request. A successful attack can crash processes and reload the device. Cisco has released software updates.

Cisco Security AdvisoriesOct 7, 16:00 UTC · 1d agoVulnerability 3 sources1

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Crafted MPLS echo requests can yield unauthenticated root code execution on Cisco Nexus 3000 and 9000 switches.

Cisco disclosed a vulnerability in the MPLS OAM feature of NX-OS Software on Nexus 3000 and 9000 Series switches. Improper validation of MPLS echo-request packets allows an unauthenticated remote attacker to execute arbitrary code as root or cause a denial of service. Exploitation requires sending a crafted MPLS echo-request to an IP address on the affected device. The excerpt does not state that exploitation has been observed.

Cisco Security Advisoriesupdated Oct 8, 10:19 UTC · 14h agofirst Oct 7, 16:00 UTC · 1d agoVulnerability 5 sources

Cisco Advance Notification for Publication of October 7, 2026, Security Advisories

Cisco will publish October 7 security advisories and hardening fixes for NX-OS, Meraki, APIC, and related products.

Cisco PSIRT said it will publish security advisories on October 7, 2026, disclosing vulnerabilities and fixed software for several products. The notice covers security hardening releases for Application Policy Infrastructure Controller, Finesse License On-Prem (formerly Smart Software Manager On-Prem), Meraki, and NX-OS. NX-OS coverage includes MDS 9000, Nexus 3000, 7000, and 9000 Series switches, Nexus 9000 in ACI mode, and UCS Fabric Interconnects. No CVE identifiers or active exploitation were mentioned, and Cisco urged customers to upgrade after publication.

Cisco Security AdvisoriesSep 30, 16:00 UTC · 8d agoAdvisory

Cisco NX-OS

Timeline9 articles

Related CVEsby mentions

Appears with