/
← Voltar ao feed
critical

Cisco patches critical unauthenticated RCE in NX-OS MPLS OAM affecting Nexus 3000 and 9000 switches (CVE-2026-76465)

1 fonte(s) · 1 atualização(ões) · publicado 07/10/2026 13:00 · coletado há 4 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. Cisco has released software updates and states that no workarounds exist. The article does not report exploitation in the wild. The advisory was published as part of Cisco's October 7, 2026 advance notification bundle.

Detalhes técnicos

  • The flaw stems from improper validation when the device processes an MPLS echo-request packet.
  • An attacker sends a crafted MPLS echo-request to an IP address on an affected device.
  • Successful exploitation can yield arbitrary code execution as root. It can also cause process crashes, leading to a device reload and a DoS condition.
  • Cisco rates the Security Impact as Critical.

Remediação

  • Apply the Cisco NX-OS software updates that fix this vulnerability, as listed in advisory cisco-sa-moam-rce-uBTzYV7.
  • No workarounds are available, so patching is the only mitigation.
  • See also the Cisco NX-OS Software Security Hardening Release: October 2026.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 07/10/2026 13:00 · coletado 19/10 18:01 primeiro registro só resumo do feed

    Cisco patches critical unauthenticated RCE in NX-OS MPLS OAM affecting Nexus 3000 and 9000 switches (CVE-2026-76465)

    ler a análise desta fonte

    Cisco disclosed a critical vulnerability, CVE-2026-76465, in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series and Nexus 9000 Series switches. An unauthenticated, remote attacker could execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. Cisco has released software updates and states that no workarounds exist. The article does not report exploitation in the wild. The advisory was published as part of Cisco's October 7, 2026 advance notification bundle.

    Technical Details

    • The flaw stems from improper validation when the device processes an MPLS echo-request packet.
    • An attacker sends a crafted MPLS echo-request to an IP address on an affected device.
    • Successful exploitation can yield arbitrary code execution as root. It can also cause process crashes, leading to a device reload and a DoS condition.
    • Cisco rates the Security Impact as Critical.

    Remediation

    • Apply the Cisco NX-OS software updates that fix this vulnerability, as listed in advisory cisco-sa-moam-rce-uBTzYV7.
    • No workarounds are available, so patching is the only mitigation.
    • See also the Cisco NX-OS Software Security Hardening Release: October 2026.