All vulnerabilities
CVE-2026-76465

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Cisco Cisco NX-OS SoftwareNetwork & edge
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.45%Chance of exploitation activity in the next 30 days, higher than 38% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published7 Oct 2026Updated 8 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.

Text from CVE List

Affected versions 30

  • Cisco NX-OS Softwareaffected: 9.3(2)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(1)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(1z)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(4)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(5)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(6)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(5w)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(7)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(7k)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(7a)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(8)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(9)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(10)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(1)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(2)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(11)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(12)CVE List
  • Cisco NX-OS Softwareaffected: 10.4(1)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(99w)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3w)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(99x)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3o)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(4)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3p)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(4a)CVE List
  • Cisco NX-OS Softwareaffected: 10.4(2)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3q)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(13)CVE List

References 1