Nexus 3000 (Product): news timeline & CVEs

Cisco Patches a Dozen Critical Vulnerabilities

Cisco patched 35 flaws, including more than a dozen critical bugs, and reports no known exploitation.

Cisco patched 35 vulnerabilities, including more than a dozen critical-severity bugs, across Meraki, License On-Prem, NX-OS, and Application Policy Infrastructure Controller. Unauthenticated License On-Prem issues include unauthorized access (CVE-2026-20328) and denial of service (CVE-2026-76454). On NX-OS, CVE-2026-76471 and CVE-2026-76465 could let remote unauthenticated attackers run code as root or cause a denial of service, while three NGOAM flaws affect only Nexus 3000 and 9000 switches with that feature enabled. Cisco also fixed a publicly disclosed high-severity SSRF in Finesse, CVE-2026-20362, and said it is not aware of exploitation.

SecurityWeekOct 8, 15:28 UTC · 9h agoVulnerability CVE-2026-76464 CVE-2026-20328 CVE-2026-76454+14 CVEs

Cisco warns of critical flaws allowing Nexus switch takeover

Cisco disclosed five critical NX-OS flaws that can give root code execution on Nexus 3000 and 9000 switches.

Cisco disclosed five critical NX-OS flaws that could let an attacker run arbitrary code as root on standalone Nexus 3000 and Nexus 9000 switches, or crash processes and force a reload. The bugs, CVE-2026-76471, CVE-2026-76485, CVE-2026-76486, CVE-2026-76501, and CVE-2026-76465, require NX-API, NGOAM, or MPLS OAM to be enabled. Cisco found them internally and said it knew of no malicious exploitation. Separate Cisco License issues include CVE-2026-76482 at CVSS 10.0 and CVE-2026-76480 at CVSS 9.8, fixed in release 10-202609.

BleepingComputerOct 8, 15:26 UTC · 9h agoVulnerability CVE-2026-76471 CVE-2026-76485 CVE-2026-76486+6 CVEs

Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root

Cisco disclosed three critical unauthenticated root code-execution flaws in Nexus 3000 and 9000 switches.

Cisco advisory cisco-sa-ngoam-rce-LWKQ4BU describes three critical NGOAM stack overflows in NX-OS on Nexus 3000 and 9000 Series switches running standalone mode. CVE-2026-76485, CVE-2026-76486, and CVE-2026-76501 are each scored CVSS 9.8 (CWE-121) and can be triggered by unauthenticated crafted IP packets, leading to root code execution or a device reload. CVE-2026-76485 needs only NGOAM; the others also require VXLAN EVPN overlay or SRv6, and ACI-mode Nexus 9000 plus Nexus 7000 are unaffected. Cisco says there is no workaround and no known exploitation, and recommends fixed releases, with disabling NGOAM or Live Protect shields only as interim measures.

GBHackersOct 8, 10:19 UTC · 14h agoVulnerability 5 sources CVE-2026-76485 CVE-2026-76486 CVE-2026-76501

Critical Cisco Nexus Flaws Let Unauthenticated Attackers Execute Code With Root Privileges

Cisco fixed three critical unauthenticated NX-OS flaws that can give root on Nexus 3000 and 9000 switches.

Cisco patched three critical NX-OS flaws in Nexus 3000 and 9000 Series switches running in standalone mode. CVE-2026-76485, CVE-2026-76486, and CVE-2026-76501, scored CVSS 9.8, come from improper validation of IP traffic to NGOAM and can allow unauthenticated remote root code execution or process crashes and reloads. Exposure depends on NGOAM plus, for two CVEs, SRv6 or a qualifying VXLAN EVPN overlay; Nexus 9000 in ACI mode, Nexus 7000, and MDS 9000 are unaffected. Cisco said it knew of no malicious use, there is no workaround other than disabling unneeded NGOAM, and fixed releases are available. A previously reported issue, CVE-2026-20212, is separate.

Cyber Security Newsupdated Oct 8, 10:19 UTC · 14h agofirst Oct 8, 08:44 UTC · 15h agoVulnerability 5 sources CVE-2026-76485 CVE-2026-76486 CVE-2026-76501

Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities

Cisco warns NGOAM flaws in NX-OS on Nexus 3000 and 9000 switches allow unauthenticated remote root code execution.

Cisco disclosed multiple vulnerabilities in the NGOAM feature of NX-OS Software on Nexus 3000 and 9000 Series switches. An unauthenticated remote attacker could send crafted packets to an IP interface and execute arbitrary code with root privileges or cause a denial of service and device reload. The bugs are due to improper validation of IP traffic when NGOAM is enabled. The advisory does not report that exploitation has been observed.

Cisco Security Advisoriesupdated Oct 8, 10:19 UTC · 14h agofirst Oct 7, 16:00 UTC · 1d agoVulnerability 5 sources

Cisco Advance Notification for Publication of October 7, 2026, Security Advisories

Cisco will publish October 7 security advisories and hardening fixes for NX-OS, Meraki, APIC, and related products.

Cisco PSIRT said it will publish security advisories on October 7, 2026, disclosing vulnerabilities and fixed software for several products. The notice covers security hardening releases for Application Policy Infrastructure Controller, Finesse License On-Prem (formerly Smart Software Manager On-Prem), Meraki, and NX-OS. NX-OS coverage includes MDS 9000, Nexus 3000, 7000, and 9000 Series switches, Nexus 9000 in ACI mode, and UCS Fabric Interconnects. No CVE identifiers or active exploitation were mentioned, and Cisco urged customers to upgrade after publication.

Cisco Security AdvisoriesSep 30, 16:00 UTC · 8d agoAdvisory

Nexus 3000

Timeline6 articles

Related CVEsby mentions

Appears with