CVE-2026-76471

Medienbericht

EPSS 0.52%
Veröffentlicht 07.10.2026 16:15:35
Zuletzt bearbeitet 08.10.2026 20:08:45
Erkennungen
Login

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. 

The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

CNA 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerCisco

≫

Produkt Cisco NX-OS Software

Default Statusunknown

Version 9.2(3)

Status affected

Version 9.2(2v)

Status affected

Version 9.2(1)

Status affected

Version 9.2(2t)

Status affected

Version 9.2(3y)

Status affected

Version 9.3(2)

Status affected

Version 9.2(4)

Status affected

Version 9.3(1)

Status affected

Version 9.3(1z)

Status affected

Version 9.2(2)

Status affected

Version 9.3(3)

Status affected

Version 9.3(4)

Status affected

Version 9.3(5)

Status affected

Version 9.3(6)

Status affected

Version 9.3(5w)

Status affected

Version 9.3(7)

Status affected

Version 9.3(7k)

Status affected

Version 9.3(7a)

Status affected

Version 9.3(8)

Status affected

Version 9.3(9)

Status affected

Version 9.3(10)

Status affected

Version 10.3(1)

Status affected

Version 10.3(2)

Status affected

Version 9.3(11)

Status affected

Version 10.3(3)

Status affected

Version 9.3(12)

Status affected

Version 10.4(1)

Status affected

Version 10.3(99w)

Status affected

Version 10.3(3w)

Status affected

Version 10.3(99x)

Status affected

Version 10.3(3o)

Status affected

Version 10.3(4)

Status affected

Version 10.3(3p)

Status affected

Version 10.3(4a)

Status affected

Version 10.4(2)

Status affected

Version 10.3(3q)

Status affected

Version 9.3(13)

Status affected

Version 10.3(5)

Status affected

Version 10.4(3)

Status affected

Version 10.3(3x)

Status affected

Version 10.3(4g)

Status affected

Version 10.5(1)

Status affected

Version 10.3(3r)

Status affected

Version 10.3(6)

Status affected

Version 9.3(14)

Status affected

Version 10.4(4)

Status affected

Version 10.3(4h)

Status affected

Version 10.5(2)

Status affected

Version 10.3(7)

Status affected

Version 10.4(5)

Status affected

Version 10.5(3)

Status affected

Version 9.3(15)

Status affected

Version 10.4(4g)

Status affected

Version 10.5(4)

Status affected

Version 10.6(1)

Status affected

Version 10.5(3t)

Status affected

Version 10.3(8)

Status affected

Version 10.4(6)

Status affected

Version 10.5(3s)

Status affected

Version 10.5(3e)

Status affected

Version 10.5(3o)

Status affected

Version 9.3(16)

Status affected

Version 10.6(1s)

Status affected

Version 10.6(2)

Status affected

Version 10.5(3p)

Status affected

Version 10.3(9)

Status affected

Version 10.6(2s)

Status affected

Version 10.6(3)

Status affected

Version 10.4(7)

Status affected

Version 10.5(5)

Status affected

Version 9.3(17)

Status affected

Version 10.6(2n)

Status affected

Version 10.6(3s)

Status affected

HerstellerCisco

≫

Produkt Cisco Unified Computing System (Managed)

Default Statusunknown

Version 4.0(1a)

Status affected

Version 4.1(1d)

Status affected

Version 4.0(4f)

Status affected

Version 4.0(4a)

Status affected

Version 4.0(4e)

Status affected

Version 4.0(4c)

Status affected

Version 4.0(4h)

Status affected

Version 4.1(1c)

Status affected

Version 4.0(2a)

Status affected

Version 4.1(1e)

Status affected

Version 4.1(2a)

Status affected

Version 4.0(2b)

Status affected

Version 4.0(1b)

Status affected

Version 4.0(4d)

Status affected

Version 4.0(2e)

Status affected

Version 4.1(1a)

Status affected

Version 4.0(4g)

Status affected

Version 4.0(1c)

Status affected

Version 4.0(1d)

Status affected

Version 4.0(4b)

Status affected

Version 4.0(4i)

Status affected

Version 4.0(2d)

Status affected

Version 4.1(1b)

Status affected

Version 4.1(2b)

Status affected

Version 4.0(4k)

Status affected

Version 4.1(3a)

Status affected

Version 4.1(3b)

Status affected

Version 4.1(2c)

Status affected

Version 4.0(4l)

Status affected

Version 4.1(4a)

Status affected

Version 4.1(3c)

Status affected

Version 4.1(3d)

Status affected

Version 4.2(1c)

Status affected

Version 4.2(1d)

Status affected

Version 4.0(4m)

Status affected

Version 4.1(3e)

Status affected

Version 4.2(1f)

Status affected

Version 4.1(3f)

Status affected

Version 4.2(1i)

Status affected

Version 4.1(3h)

Status affected

Version 4.2(1k)

Status affected

Version 4.2(1l)

Status affected

Version 4.0(4n)

Status affected

Version 4.2(1m)

Status affected

Version 4.1(3i)

Status affected

Version 4.2(2a)

Status affected

Version 4.2(1n)

Status affected

Version 4.1(3j)

Status affected

Version 4.2(2c)

Status affected

Version 4.2(2d)

Status affected

Version 4.2(3b)

Status affected

Version 4.1(3k)

Status affected

Version 4.0(4o)

Status affected

Version 4.2(2e)

Status affected

Version 4.2(3d)

Status affected

Version 4.2(3e)

Status affected

Version 4.2(3g)

Status affected

Version 4.1(3l)

Status affected

Version 4.3(2b)

Status affected

Version 4.2(3h)

Status affected

Version 4.2(3i)

Status affected

Version 4.3(2c)

Status affected

Version 4.1(3m)

Status affected

Version 4.3(2e)

Status affected

Version 4.3(3a)

Status affected

Version 4.2(3j)

Status affected

Version 4.3(3c)

Status affected

Version 4.3(4a)

Status affected

Version 4.2(3k)

Status affected

Version 4.3(4b)

Status affected

Version 4.3(4c)

Status affected

Version 4.2(3l)

Status affected

Version 4.3(4d)

Status affected

Version 4.3(2f)

Status affected

Version 4.2(3m)

Status affected

Version 4.3(5a)

Status affected

Version 4.3(4e)

Status affected

Version 4.1(3n)

Status affected

Version 4.3(4f)

Status affected

Version 4.2(3n)

Status affected

Version 4.3(5c)

Status affected

Version 4.2(3o)

Status affected

Version 4.3(5d)

Status affected

Version 4.3(6a)

Status affected

Version 4.3(6b)

Status affected

Version 4.3(5e)

Status affected

Version 4.3(6c)

Status affected

Version 4.2(3p)

Status affected

Version 4.3(6d)

Status affected

Version 4.3(6e)

Status affected

Version 4.3(6f)

Status affected

Version 4.2(3r)

Status affected

Version 4.3(6g)

Status affected

Version 4.3(6h)

Status affected

Version 4.2(3s)

Status affected

Version 4.3(6i)

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.52%	0.426

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Cisco PSIRT	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

08.10.2026 17:43

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

https://nvd.nist.gov/vuln/detail/CVE-2026-76471

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-76471

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-76471

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-76471