All vulnerabilities
CVE-2026-76471

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Cisco Cisco NX-OS SoftwareNetwork & edge
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.52%Chance of exploitation activity in the next 30 days, higher than 43% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published7 Oct 2026Updated 8 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. 

The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

Text from CVE List

Affected versions 60

  • Cisco NX-OS Softwareaffected: 9.2(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(2v)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(1)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(2t)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(3y)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(2)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(4)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(1)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(1z)CVE List
  • Cisco NX-OS Softwareaffected: 9.2(2)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(4)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(5)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(6)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(5w)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(7)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(7k)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(7a)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(8)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(9)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(10)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(1)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(2)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(11)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3)CVE List
  • Cisco NX-OS Softwareaffected: 9.3(12)CVE List
  • Cisco NX-OS Softwareaffected: 10.4(1)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(99w)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(3w)CVE List
  • Cisco NX-OS Softwareaffected: 10.3(99x)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(1a)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(1d)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4f)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4a)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4e)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4c)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4h)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(1c)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(2a)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(1e)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(2a)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(2b)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(1b)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4d)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(2e)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(1a)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4g)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(1c)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(1d)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4b)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4i)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(2d)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(1b)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(2b)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4k)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(3a)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(3b)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(2c)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.0(4l)CVE List
  • Cisco Unified Computing System (Managed)affected: 4.1(4a)CVE List

References 1