Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-76458

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76458 are related to improper handling of exceptional conditions issues that are grouped under the Common Weakness Enumeration (CWE) CWE-703.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode Nx-os Software Unified Computing System Manager
CVE-2026-76457

Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Read Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76457 are related to out-of-bounds read issues that are grouped under the Common Weakness Enumeration (CWE) CWE-125.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode Nx-os Software Unified Computing System Manager
CVE-2026-76456

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-20.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode Nx-os Software Unified Computing System Manager
CVE-2026-76455

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76455 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode Nx-os Software Unified Computing System Manager
CVE-2026-76453

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76453 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode Nx-os Software Unified Computing System Manager
CVE-2026-20038

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploit this vulnerability by sending IPv4 or IPv6 packets using UDP source and destination ports that are assigned to&nbsp;DHCP traffic through an affected device. A successful exploit could allow the attacker to bypass EPG contracts on the affected device.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode
CVE-2026-20048

Cisco NX-OS Software SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper processing when parsing SNMP requests. An attacker could exploit this vulnerability by continuously sending SNMP queries&nbsp;to a specific MIB of an affected device. A successful exploit could allow the attacker to cause a kernel panic on the device, resulting in a reload and a&nbsp;DoS condition. Note: This vulnerability affects SNMP versions 1, 2c, and 3. To exploit&nbsp;this vulnerability through SNMPv1 or&nbsp;SNMPv2c, the attacker must have a valid read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode
CVE-2026-20033

Cisco NX-OS Software Denial of Service Vulnerability

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the&nbsp;management interface of an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only the out-of-band (OOB) management interface is affected.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Cisco
Products
Cisco Nx-os System Software In Aci Mode