Riskcovery

CVE-2026-76471

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

State
Published
Severity
9.8 Critical
Published
Oct 7, 2026
Updated
Oct 8, 2026
Reserved
Aug 19, 2026

Read the record on cve.org

Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. 

The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hcisco

Weaknesses

Affected Products

ProductVersions
Cisco NX-OS SoftwareCisco
  • 9.2(3)Affected
  • 9.2(2v)Affected
  • 9.2(1)Affected
  • 9.2(2t)Affected
  • 9.2(3y)Affected
  • 9.3(2)Affected
  • 9.2(4)Affected
  • 9.3(1)Affected
  • 9.3(1z)Affected
  • 9.2(2)Affected
  • 9.3(3)Affected
  • 9.3(4)Affected
  • 9.3(5)Affected
  • 9.3(6)Affected
  • 9.3(5w)Affected
  • 9.3(7)Affected
  • 9.3(7k)Affected
  • 9.3(7a)Affected
  • 9.3(8)Affected
  • 9.3(9)Affected
  • 9.3(10)Affected
  • 10.3(1)Affected
  • 10.3(2)Affected
  • 9.3(11)Affected
  • 10.3(3)Affected
  • and 48 more versions
Cisco Unified Computing System (Managed)Cisco
  • 4.0(1a)Affected
  • 4.1(1d)Affected
  • 4.0(4f)Affected
  • 4.0(4a)Affected
  • 4.0(4e)Affected
  • 4.0(4c)Affected
  • 4.0(4h)Affected
  • 4.1(1c)Affected
  • 4.0(2a)Affected
  • 4.1(1e)Affected
  • 4.1(2a)Affected
  • 4.0(2b)Affected
  • 4.0(1b)Affected
  • 4.0(4d)Affected
  • 4.0(2e)Affected
  • 4.1(1a)Affected
  • 4.0(4g)Affected
  • 4.0(1c)Affected
  • 4.0(1d)Affected
  • 4.0(4b)Affected
  • 4.0(4i)Affected
  • 4.0(2d)Affected
  • 4.1(1b)Affected
  • 4.1(2b)Affected
  • 4.0(4k)Affected
  • and 71 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.