/
cves:CVE-2026-20038 × limpar

Resultados

2 casos · pág. 1/1

sec.cloudapps.cisco.com · medium

Cisco Nexus 9000 ACI Mode EPG contract bypass flaw (CVE-2026-20038) allows unauthenticated remote traffic filtering evasion

Cisco disclosed CVE-2026-20038, a medium-severity vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode. An unauthenticated, remote attacker could bypass configured EPG contracts, undermining segmentation policy enforced by the fabric. The flaw stems from improper control w…

sec.cloudapps.cisco.com · · 2 atualizações high

Cisco releases NX-OS hardening updates for six internally found flaws rated Critical; no workarounds, no known exploitation

Cisco published the NX-OS Software Security Hardening Release: October 2026 advisory (cisco-sa-hardening-nxosw1-cWzSbtR) on 7 October 2026. It covers multiple vulnerabilities found by the Cisco NX-OS engineering team during an internal security review. Cisco rates the security impact as Critical and says the flaws are not known to be acti…