Remote Code Execution and DoS Vulnerability in Cisco NX-OS Software

CVE-2026-76486

What is CVE-2026-76486?

A security issue within the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could potentially allow an unauthenticated remote attacker to execute arbitrary code with root privileges or trigger a Denial-of-Service (DoS) event on affected devices. This vulnerability arises from improper input validation of IP traffic when NGOAM is enabled. An attacker might exploit this by sending specially crafted packets to an IP interface on the vulnerable device. Successful exploitation could lead to arbitrary code execution, process crashes, and system reloads, significantly disrupting network operations.

References