CVE-2026-76465
Received Received - Intake

Remote Code Execution in Cisco NX-OS MPLS OAM

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-76465
EUVD
EUVD-2026-94457

Affected Vendors & Products

Showing 66 associated CPEs
Vendor Product Version / Range
Cisco Cisco NX-OS Software 9.3(2)
Cisco Cisco NX-OS Software 9.3(1)
Cisco Cisco NX-OS Software 9.3(1z)
Cisco Cisco NX-OS Software 9.3(3)
Cisco Cisco NX-OS Software 9.3(4)
Cisco Cisco NX-OS Software 9.3(5)
Cisco Cisco NX-OS Software 9.3(6)
Cisco Cisco NX-OS Software 9.3(5w)
Cisco Cisco NX-OS Software 9.3(7)
Cisco Cisco NX-OS Software 9.3(7k)
Cisco Cisco NX-OS Software 9.3(7a)
Cisco Cisco NX-OS Software 9.3(8)
Cisco Cisco NX-OS Software 9.3(9)
Cisco Cisco NX-OS Software 9.3(10)
Cisco Cisco NX-OS Software 10.3(1)
Cisco Cisco NX-OS Software 10.3(2)
Cisco Cisco NX-OS Software 9.3(11)
Cisco Cisco NX-OS Software 10.3(3)
Cisco Cisco NX-OS Software 9.3(12)
Cisco Cisco NX-OS Software 10.4(1)
Cisco Cisco NX-OS Software 10.3(99w)
Cisco Cisco NX-OS Software 10.3(3w)
Cisco Cisco NX-OS Software 10.3(99x)
Cisco Cisco NX-OS Software 10.3(3o)
Cisco Cisco NX-OS Software 10.3(4)
Cisco Cisco NX-OS Software 10.3(3p)
Cisco Cisco NX-OS Software 10.3(4a)
Cisco Cisco NX-OS Software 10.4(2)
Cisco Cisco NX-OS Software 10.3(3q)
Cisco Cisco NX-OS Software 9.3(13)
Cisco Cisco NX-OS Software 10.3(5)
Cisco Cisco NX-OS Software 10.4(3)
Cisco Cisco NX-OS Software 10.3(3x)
Cisco Cisco NX-OS Software 10.3(4g)
Cisco Cisco NX-OS Software 10.5(1)
Cisco Cisco NX-OS Software 10.3(3r)
Cisco Cisco NX-OS Software 10.3(6)
Cisco Cisco NX-OS Software 9.3(14)
Cisco Cisco NX-OS Software 10.4(4)
Cisco Cisco NX-OS Software 10.3(4h)
Cisco Cisco NX-OS Software 10.5(2)
Cisco Cisco NX-OS Software 10.3(7)
Cisco Cisco NX-OS Software 10.4(5)
Cisco Cisco NX-OS Software 10.5(3)
Cisco Cisco NX-OS Software 9.3(15)
Cisco Cisco NX-OS Software 10.4(4g)
Cisco Cisco NX-OS Software 10.5(4)
Cisco Cisco NX-OS Software 10.6(1)
Cisco Cisco NX-OS Software 10.5(3t)
Cisco Cisco NX-OS Software 10.3(8)
Cisco Cisco NX-OS Software 10.4(6)
Cisco Cisco NX-OS Software 10.5(3s)
Cisco Cisco NX-OS Software 10.5(3e)
Cisco Cisco NX-OS Software 10.5(3o)
Cisco Cisco NX-OS Software 9.3(16)
Cisco Cisco NX-OS Software 10.6(1s)
Cisco Cisco NX-OS Software 10.6(2)
Cisco Cisco NX-OS Software 10.5(3p)
Cisco Cisco NX-OS Software 10.3(9)
Cisco Cisco NX-OS Software 10.6(2s)
Cisco Cisco NX-OS Software 10.6(3)
Cisco Cisco NX-OS Software 10.4(7)
Cisco Cisco NX-OS Software 10.5(5)
Cisco Cisco NX-OS Software 9.3(17)
Cisco Cisco NX-OS Software 10.6(2n)
Cisco Cisco NX-OS Software 10.6(3s)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-590 The product calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a critical remote code execution vulnerability in Cisco Nexus 3000 and 9000 Series Switches running vulnerable Cisco NX-OS Software with the MPLS OAM feature enabled. It allows unauthenticated remote attackers to execute arbitrary code with root privileges or cause denial of service by sending crafted MPLS echo-request packets.

Detection Guidance

To detect this vulnerability, check if your Cisco Nexus 3000 or 9000 Series Switches have the MPLS OAM feature enabled. Use the command 'show running-config | include mpls oam' on the device. If output appears, the feature is active and the device is potentially vulnerable.

Impact Analysis

Exploitation could lead to full system compromise with root access, device crashes causing network downtime, and potential network disruption. Attackers could take control of affected switches, steal data, or disrupt services.

Mitigation Strategies

Immediately disable the MPLS OAM feature if not required using 'no feature mpls oam' in configuration mode. Apply Cisco's official software updates to fix the vulnerability. Enable Cisco's Live Protect shield for interim protection until patches are applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76465. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart