Posting Date: 2026/10/19

【Vulnerability Alert】Cisco NX-OS Software NX-API has 3 critical security vulnerabilities

  • Subject:Cisco NX-OS Software NX-API has 3 critical security vulnerabilities


  • Description:
    • Forwarded from the TWCERT/CC Security Alert TWCERTCC-200-202610-00000026
    • The Cisco NX-OS Software development team discovered multiple security vulnerabilities during an internal security review, which have now been fixed. There is currently no evidence that these vulnerabilities have been actively exploited. To help customers deploy security updates in a timely manner and streamline the vulnerability disclosure process, Cisco has published the related vulnerability information and remediation recommendations.
    • CVE-2026-76453, CVSS: 8.8, improper handling vulnerability.
    • CVE-2026-76455, CVSS: 9.8, improper access control vulnerability.
    • CVE-2026-76459, CVSS: 9.8, out-of-bounds write vulnerability.
  • Affected Platforms:
    • MDS 9000 Series Multilayer Switches Cisco NX-OS Software versions 9.3 and earlier, MDS 9000 Series Multilayer Switches Cisco NX-OS Software version 9.4, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software versions 10.3 and earlier, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.4, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.5, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.6, Nexus 7000 Series Switches Cisco NX-OS Software versions 8.3 and earlier, Nexus 7000 Series Switches Cisco NX-OS Software version 8.4, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software versions 16.0 and earlier, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.1, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.2, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software versions 4.2 and earlier, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software version 4.3, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software version 6.0
  • Recommended Actions:
    • Please update to the following versions: MDS 9000 Series Multilayer Switches Cisco NX-OS Software version 9.4(5a) and later, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.3(10) and later, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.4(8) and later, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.5(6) and later, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.6(4) and later, Nexus 7000 Series Switches Cisco NX-OS Software version 8.4(14) and later, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.0(9h) and later, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.1(6g) and later, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.2(3g) and later, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode version 4.3(6j) and later, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode version 6.0(2e) and later, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode version 4.3(6.260049) and later, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode version 4.3(6.260059) and later, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode version 6.0(2.260080) and later
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11290-ae311-1.html

Computer and Communication Center
Network System Division