/
← Voltar ao feed
critical

Cisco patches unauthenticated root RCE flaws in NX-OS NGOAM on Nexus 3000 and 9000 switches (CVE-2026-76485, -76486, -76501)

1 fonte(s) · 1 atualização(ões) · publicado 07/10/2026 13:00 · coletado há 1 dia

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws are tracked as CVE-2026-76485, CVE-2026-76486 and CVE-2026-76501, and Cisco rates the Security Impact as Critical. Cisco has released software updates and states that no workarounds exist. The advisory does not report exploitation in the wild. It was published as part of Cisco's October 7, 2026 advance notification bundle.

Technical Details

  • The vulnerabilities result from improper input validation of IP traffic when NGOAM is enabled.
  • An attacker sends crafted packets to an IP interface on an affected device.
  • Successful exploitation can yield arbitrary code execution as root. It can also cause process crashes, leading to a device reload and a DoS condition.
  • Feature requirements vary for each vulnerability, so the Vulnerable Products section of the advisory (cisco-sa-ngoam-rce-LWKQ4BU) must be checked for each CVE.

Remediation

  • Apply the Cisco NX-OS software updates that fix these vulnerabilities, as listed in the advisory.
  • No workarounds are available, so patching is the only mitigation.
  • See also the Cisco NX-OS Software Security Hardening Release: October 2026.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 07/10/2026 13:00 · coletado 19/10 18:01 primeiro registro só resumo do feed

    Cisco patches unauthenticated root RCE flaws in NX-OS NGOAM on Nexus 3000 and 9000 switches (CVE-2026-76485, -76486, -76501)

    ler a análise desta fonte

    Cisco disclosed multiple critical vulnerabilities in the Next Generation OAM (NGOAM) feature of Cisco NX-OS Software, affecting Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. The flaws are tracked as CVE-2026-76485, CVE-2026-76486 and CVE-2026-76501, and Cisco rates the Security Impact as Critical. Cisco has released software updates and states that no workarounds exist. The advisory does not report exploitation in the wild. It was published as part of Cisco's October 7, 2026 advance notification bundle.

    Technical Details

    • The vulnerabilities result from improper input validation of IP traffic when NGOAM is enabled.
    • An attacker sends crafted packets to an IP interface on an affected device.
    • Successful exploitation can yield arbitrary code execution as root. It can also cause process crashes, leading to a device reload and a DoS condition.
    • Feature requirements vary for each vulnerability, so the Vulnerable Products section of the advisory (cisco-sa-ngoam-rce-LWKQ4BU) must be checked for each CVE.

    Remediation

    • Apply the Cisco NX-OS software updates that fix these vulnerabilities, as listed in the advisory.
    • No workarounds are available, so patching is the only mitigation.
    • See also the Cisco NX-OS Software Security Hardening Release: October 2026.