cisco-sa-napi-rce-r2shwu2jCriticalCVSS 9.8

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Published
October 7, 2026
Last Modified
October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-76471 →

📋 Description

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.

The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of October 7, 2026, Security Advisories ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-fBn58ELx"]. For further documentation of improvements and fixes in Cisco NX-OS Software, see Cisco NX-OS Software Security Hardening Release: October 2026 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-nxosw1-cWzSbtR"].

CVE-2026-76471 — Cisco NX-OS Software NX-API Remote Code Execution Vulnerability (CVSS 3.1 9.8, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

🎯 Affected products174

  • Cisco NX-OS Software
  • Cisco Nexus 3000 Series Switches
  • Cisco Nexus 9000 Series Switches
  • Cisco Unified Computing System (Managed)
  • Cisco NX-OS Software 10.3(1)
  • Cisco NX-OS Software 10.3(2)
  • Cisco NX-OS Software 10.3(3)
  • Cisco NX-OS Software 10.3(3o)
  • Cisco NX-OS Software 10.3(3p)
  • Cisco NX-OS Software 10.3(3q)
  • Cisco NX-OS Software 10.3(3r)
  • Cisco NX-OS Software 10.3(3w)
  • Cisco NX-OS Software 10.3(3x)
  • Cisco NX-OS Software 10.3(4)
  • Cisco NX-OS Software 10.3(4a)
  • Cisco NX-OS Software 10.3(4g)
  • Cisco NX-OS Software 10.3(4h)
  • Cisco NX-OS Software 10.3(5)
  • Cisco NX-OS Software 10.3(6)
  • Cisco NX-OS Software 10.3(7)
  • Cisco NX-OS Software 10.3(8)
  • Cisco NX-OS Software 10.3(9)
  • Cisco NX-OS Software 10.3(99w)
  • Cisco NX-OS Software 10.3(99x)
  • Cisco NX-OS Software 10.4(1)
  • Cisco NX-OS Software 10.4(2)
  • Cisco NX-OS Software 10.4(3)
  • Cisco NX-OS Software 10.4(4)
  • Cisco NX-OS Software 10.4(4g)
  • Cisco NX-OS Software 10.4(5)
  • +144 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address this vulnerability. Live Protect Shield Cisco has released a Live Protect shield for CVE-2026-76471 ["https://software.cisco.com/download/products?swtypemdfid=286346710&relver=10.6(3)"] to temporarily mitigate this vulnerability for Cisco NX-OS Software. For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide ["https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/106x/configuration/security/cisco-nexus-9000-series-nx-os-security-configuration-guide-release-106x/m-secure-nx-os-with-live-protect.html"]. Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To remediate this vulnerability, upgrade to a fixed software release as noted in the Fixed Software ["#fs"] section of this advisory.

🔗 References (8)