Mmastodon TechnologyCybersecurity first seen 19 h ago, last 19 h ago, peak #8

Cisco warns of critical unauthenticated root flaws in Nexus switches

Original: Cisco October advisory: 18 CVEs, 7 critical, no workarounds for any of them. NX-OS NGOAM: CVE-2026-76485/76486/76501 — a

Cisco's October security advisory covers 18 vulnerabilities, seven of them rated critical, with no workarounds available for any of them. The most severe issues in NX-OS — CVE-2026-76485, CVE-2026-76486 and CVE-2026-76501 — score 9.8 and allow unauthenticated root remote code execution via crafted IP packets on Nexus 3000 and 9000 switches, but only when NGOAM is enabled with SRv6 or NV Overlay. Administrators are urged to check exposure and patch promptly.

Why now: Security teams are rushing to assess and patch three maximum-severity switch flaws that have no workarounds.

CiscoNexus 3000Nexus 9000NX-OS

Open on mastodon →

Evidence

• Cisco October advisory: 18 CVEs, 7 critical, no workarounds for any of them. NX-OS NGOAM: CVE-2026-76485/76486/76501 — all CVSS 9.8, unauthenticated root RCE via crafted IP packets on Nexus 3000/9000. Requires NGOAM enabled (with SRv6 or NV Overlay depending on the CVE). Check:… · threataft@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/1435839