EUVD-2026-94462
GHSA-7c6x-33hj-4wv3
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Retained vendor network/unauthenticated metrics as the description gives no detail to contradict them; an out-of-bounds write plausibly yields full code-execution impact (C/I/A:H), though AV/PR are low-confidence.
Primary rating from Vendor (cisco).
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76459 are related to out-of-bounds write issues that are grouped under the Common Weakness Enumeration (CWE) CWE-787.
AnalysisAI
Out-of-bounds write defects in Cisco NX-OS Software - spanning standalone NX-OS switches, NX-OS System Software running in ACI mode, and NX-OS-based software managed through Cisco UCS - carry a vendor CVSS of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), meaning a remote, unauthenticated attacker with network reachability could potentially cause high confidentiality, integrity, and availability impact. The issues were discovered during a Cisco internal security review and are delivered as part of a bundled software hardening release rather than a single pinpointed defect, so the affected subsystem, protocol, or port is not enumerated in the available data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The advisory text provides NO concrete prerequisites - it is a bundled hardening release covering multiple internally discovered out-of-bounds write issues, and names no specific feature, protocol, port, or configuration mode. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals conflict and should be weighed carefully. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Cisco addresses these issues through a software hardening release rather than an individual bug-fix workaround, so the primary action is to upgrade each affected platform to a fixed NX-OS release identified in the Cisco advisory cisco-sa-hardening-nxosw1-cWzSbtR (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-nxosw1-cWzSbtR); the specific fixed train and build for each of NX-OS software, NX-OS in ACI mode, and Cisco UCS (Managed) is determined by that advisory, and patch availability should be treated as 'available per vendor advisory' because no exact fixed version is stated in the data supplied here. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all devices running Cisco NX-OS Software (standalone switches, ACI-mode systems, and UCS-managed NX-OS) and restrict network access to management interfaces using firewall rules and ACLs, allowing only trusted administrative subnets; enable detailed logging and monitor for unexpected reboots or crashes. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cisco Nx Os Software
View allUnauthenticated remote attackers with IP reachability to an affected Cisco NX-OS device can achieve arbitrary code execu
Unauthenticated remote code execution in the NX-API feature of Cisco NX-OS Software lets a remote attacker who can reach
Remote code execution and denial of service in Cisco NX-OS Software are possible when the SRv6 OAM (NGOAM) and SRv6 feat
Remote code execution with root privileges and denial-of-service in Cisco NX-OS Software can be triggered by unauthentic
Unauthenticated, remote code execution with root privileges and denial of service in Cisco NX-OS Software on Nexus 3000
Improper access control in Cisco NX-OS - including NX-OS running in ACI mode and the NX-OS component of managed Cisco Un
Remote code execution in the Silicon One integration of Cisco Nexus 9000 Series Switches (Cisco NX-OS Software) lets an
Improper neutralization of input in Cisco NX-OS software, NX-OS System Software running in ACI mode, and Cisco Unified C
Remotely triggerable denial-of-service conditions in Cisco NX-OS Software - including NX-OS System Software running in A
Out-of-bounds read issues in Cisco NX-OS, NX-OS in ACI mode, and managed Cisco UCS software can be triggered by remote,
Unauthenticated, network-reachable input-validation flaws in Cisco NX-OS Software command processing can disrupt affecte
BGP session flapping denial-of-service in Cisco NX-OS on Nexus 3000 and 9000 Series Switches exposes data-center routing
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today