What is the CVSS score of CVE-2026-20010?

CVE-2026-20010 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Cisco are affected by CVE-2026-20010?

Cisco NX-OS devices are vulnerable to a denial-of-service attack from adjacent network attackers that can force unexpected device reloads.

How to fix or mitigate CVE-2026-20010?

Within 24 hours: Inventory all Cisco NX-OS devices and identify which are running vulnerable versions; assess network exposure to adjacent attackers. Within 7 days: Implement network segmentation to restrict LLDP traffic and disable LLDP on non-essential interfaces; establish monitoring for LLDP anomalies and unexpected device reloads. Within 30 days: Monitor Cisco security advisories for patch availability and establish deployment timeline; conduct architecture review to minimize reliance on LLDP in critical network segments.

Cisco CVE-2026-20010

HIGH

Buffer Access with Incorrect Length Value (CWE-805)

2026-02-25 psirt@cisco.com

Denial Of Service Cisco

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 25, 2026 - 17:25 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly.

This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).

AnalysisAI

Cisco NX-OS devices can be forced to reload through a crafted LLDP packet sent by an adjacent, unauthenticated attacker, causing a denial of service condition. The vulnerability stems from improper frame field validation in the LLDP process, exploitable only from directly connected network segments. No patch is currently available for affected systems.

Technical ContextAI

exists in the a denial of component. in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly.