Remote Code Execution Vulnerability in Cisco NX-OS Software
CVE-2026-76471

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Nx-os Software
Cisco Unified Computing System (managed)
Vendor
CVE Published:
7 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76471?

A vulnerability exists within the NX-API feature of Cisco NX-OS Software, which enables unauthenticated remote attackers to send specially crafted HTTP requests that can lead to arbitrary code execution with root privileges. This flaw arises due to inadequate input validation. Successful exploitation could allow attackers to execute malicious code, resulting in process crashes and potential denial of service conditions on affected devices. For comprehensive details, refer to the official advisory.

Affected Version(s)

Cisco NX-OS Software 9.2(3)

Cisco NX-OS Software 9.2(2v)

Cisco NX-OS Software 9.2(1)

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.