Cisco Nexus 9000 ACI Mode EPG contract bypass flaw (CVE-2026-20038) allows unauthenticated remote traffic filtering evasion
Cisco disclosed CVE-2026-20038, a medium-severity vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode. An unauthenticated, remote attacker could bypass configured EPG contracts, undermining segmentation policy enforced by the fabric. The flaw stems from improper control w…