CVE-2026-76471
Received Received - Intake

Remote Code Execution in Cisco NX-OS NX-API

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.  The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-76471
EUVD
EUVD-2026-94461

Affected Vendors & Products

Showing 169 associated CPEs
Vendor Product Version / Range
Cisco Cisco NX-OS Software 9.2(3)
Cisco Cisco NX-OS Software 9.2(2v)
Cisco Cisco NX-OS Software 9.2(1)
Cisco Cisco NX-OS Software 9.2(2t)
Cisco Cisco NX-OS Software 9.2(3y)
Cisco Cisco NX-OS Software 9.3(2)
Cisco Cisco NX-OS Software 9.2(4)
Cisco Cisco NX-OS Software 9.3(1)
Cisco Cisco NX-OS Software 9.3(1z)
Cisco Cisco NX-OS Software 9.2(2)
Cisco Cisco NX-OS Software 9.3(3)
Cisco Cisco NX-OS Software 9.3(4)
Cisco Cisco NX-OS Software 9.3(5)
Cisco Cisco NX-OS Software 9.3(6)
Cisco Cisco NX-OS Software 9.3(5w)
Cisco Cisco NX-OS Software 9.3(7)
Cisco Cisco NX-OS Software 9.3(7k)
Cisco Cisco NX-OS Software 9.3(7a)
Cisco Cisco NX-OS Software 9.3(8)
Cisco Cisco NX-OS Software 9.3(9)
Cisco Cisco NX-OS Software 9.3(10)
Cisco Cisco NX-OS Software 10.3(1)
Cisco Cisco NX-OS Software 10.3(2)
Cisco Cisco NX-OS Software 9.3(11)
Cisco Cisco NX-OS Software 10.3(3)
Cisco Cisco NX-OS Software 9.3(12)
Cisco Cisco NX-OS Software 10.4(1)
Cisco Cisco NX-OS Software 10.3(99w)
Cisco Cisco NX-OS Software 10.3(3w)
Cisco Cisco NX-OS Software 10.3(99x)
Cisco Cisco NX-OS Software 10.3(3o)
Cisco Cisco NX-OS Software 10.3(4)
Cisco Cisco NX-OS Software 10.3(3p)
Cisco Cisco NX-OS Software 10.3(4a)
Cisco Cisco NX-OS Software 10.4(2)
Cisco Cisco NX-OS Software 10.3(3q)
Cisco Cisco NX-OS Software 9.3(13)
Cisco Cisco NX-OS Software 10.3(5)
Cisco Cisco NX-OS Software 10.4(3)
Cisco Cisco NX-OS Software 10.3(3x)
Cisco Cisco NX-OS Software 10.3(4g)
Cisco Cisco NX-OS Software 10.5(1)
Cisco Cisco NX-OS Software 10.3(3r)
Cisco Cisco NX-OS Software 10.3(6)
Cisco Cisco NX-OS Software 9.3(14)
Cisco Cisco NX-OS Software 10.4(4)
Cisco Cisco NX-OS Software 10.3(4h)
Cisco Cisco NX-OS Software 10.5(2)
Cisco Cisco NX-OS Software 10.3(7)
Cisco Cisco NX-OS Software 10.4(5)
Cisco Cisco NX-OS Software 10.5(3)
Cisco Cisco NX-OS Software 9.3(15)
Cisco Cisco NX-OS Software 10.4(4g)
Cisco Cisco NX-OS Software 10.5(4)
Cisco Cisco NX-OS Software 10.6(1)
Cisco Cisco NX-OS Software 10.5(3t)
Cisco Cisco NX-OS Software 10.3(8)
Cisco Cisco NX-OS Software 10.4(6)
Cisco Cisco NX-OS Software 10.5(3s)
Cisco Cisco NX-OS Software 10.5(3e)
Cisco Cisco NX-OS Software 10.5(3o)
Cisco Cisco NX-OS Software 9.3(16)
Cisco Cisco NX-OS Software 10.6(1s)
Cisco Cisco NX-OS Software 10.6(2)
Cisco Cisco NX-OS Software 10.5(3p)
Cisco Cisco NX-OS Software 10.3(9)
Cisco Cisco NX-OS Software 10.6(2s)
Cisco Cisco NX-OS Software 10.6(3)
Cisco Cisco NX-OS Software 10.4(7)
Cisco Cisco NX-OS Software 10.5(5)
Cisco Cisco NX-OS Software 9.3(17)
Cisco Cisco NX-OS Software 10.6(2n)
Cisco Cisco NX-OS Software 10.6(3s)
Cisco Cisco Unified Computing System (Managed) 4.0(1a)
Cisco Cisco Unified Computing System (Managed) 4.1(1d)
Cisco Cisco Unified Computing System (Managed) 4.0(4f)
Cisco Cisco Unified Computing System (Managed) 4.0(4a)
Cisco Cisco Unified Computing System (Managed) 4.0(4e)
Cisco Cisco Unified Computing System (Managed) 4.0(4c)
Cisco Cisco Unified Computing System (Managed) 4.0(4h)
Cisco Cisco Unified Computing System (Managed) 4.1(1c)
Cisco Cisco Unified Computing System (Managed) 4.0(2a)
Cisco Cisco Unified Computing System (Managed) 4.1(1e)
Cisco Cisco Unified Computing System (Managed) 4.1(2a)
Cisco Cisco Unified Computing System (Managed) 4.0(2b)
Cisco Cisco Unified Computing System (Managed) 4.0(1b)
Cisco Cisco Unified Computing System (Managed) 4.0(4d)
Cisco Cisco Unified Computing System (Managed) 4.0(2e)
Cisco Cisco Unified Computing System (Managed) 4.1(1a)
Cisco Cisco Unified Computing System (Managed) 4.0(4g)
Cisco Cisco Unified Computing System (Managed) 4.0(1c)
Cisco Cisco Unified Computing System (Managed) 4.0(1d)
Cisco Cisco Unified Computing System (Managed) 4.0(4b)
Cisco Cisco Unified Computing System (Managed) 4.0(4i)
Cisco Cisco Unified Computing System (Managed) 4.0(2d)
Cisco Cisco Unified Computing System (Managed) 4.1(1b)
Cisco Cisco Unified Computing System (Managed) 4.1(2b)
Cisco Cisco Unified Computing System (Managed) 4.0(4k)
Cisco Cisco Unified Computing System (Managed) 4.1(3a)
Cisco Cisco Unified Computing System (Managed) 4.1(3b)
Cisco Cisco Unified Computing System (Managed) 4.1(2c)
Cisco Cisco Unified Computing System (Managed) 4.0(4l)
Cisco Cisco Unified Computing System (Managed) 4.1(4a)
Cisco Cisco Unified Computing System (Managed) 4.1(3c)
Cisco Cisco Unified Computing System (Managed) 4.1(3d)
Cisco Cisco Unified Computing System (Managed) 4.2(1c)
Cisco Cisco Unified Computing System (Managed) 4.2(1d)
Cisco Cisco Unified Computing System (Managed) 4.0(4m)
Cisco Cisco Unified Computing System (Managed) 4.1(3e)
Cisco Cisco Unified Computing System (Managed) 4.2(1f)
Cisco Cisco Unified Computing System (Managed) 4.1(3f)
Cisco Cisco Unified Computing System (Managed) 4.2(1i)
Cisco Cisco Unified Computing System (Managed) 4.1(3h)
Cisco Cisco Unified Computing System (Managed) 4.2(1k)
Cisco Cisco Unified Computing System (Managed) 4.2(1l)
Cisco Cisco Unified Computing System (Managed) 4.0(4n)
Cisco Cisco Unified Computing System (Managed) 4.2(1m)
Cisco Cisco Unified Computing System (Managed) 4.1(3i)
Cisco Cisco Unified Computing System (Managed) 4.2(2a)
Cisco Cisco Unified Computing System (Managed) 4.2(1n)
Cisco Cisco Unified Computing System (Managed) 4.1(3j)
Cisco Cisco Unified Computing System (Managed) 4.2(2c)
Cisco Cisco Unified Computing System (Managed) 4.2(2d)
Cisco Cisco Unified Computing System (Managed) 4.2(3b)
Cisco Cisco Unified Computing System (Managed) 4.1(3k)
Cisco Cisco Unified Computing System (Managed) 4.0(4o)
Cisco Cisco Unified Computing System (Managed) 4.2(2e)
Cisco Cisco Unified Computing System (Managed) 4.2(3d)
Cisco Cisco Unified Computing System (Managed) 4.2(3e)
Cisco Cisco Unified Computing System (Managed) 4.2(3g)
Cisco Cisco Unified Computing System (Managed) 4.1(3l)
Cisco Cisco Unified Computing System (Managed) 4.3(2b)
Cisco Cisco Unified Computing System (Managed) 4.2(3h)
Cisco Cisco Unified Computing System (Managed) 4.2(3i)
Cisco Cisco Unified Computing System (Managed) 4.3(2c)
Cisco Cisco Unified Computing System (Managed) 4.1(3m)
Cisco Cisco Unified Computing System (Managed) 4.3(2e)
Cisco Cisco Unified Computing System (Managed) 4.3(3a)
Cisco Cisco Unified Computing System (Managed) 4.2(3j)
Cisco Cisco Unified Computing System (Managed) 4.3(3c)
Cisco Cisco Unified Computing System (Managed) 4.3(4a)
Cisco Cisco Unified Computing System (Managed) 4.2(3k)
Cisco Cisco Unified Computing System (Managed) 4.3(4b)
Cisco Cisco Unified Computing System (Managed) 4.3(4c)
Cisco Cisco Unified Computing System (Managed) 4.2(3l)
Cisco Cisco Unified Computing System (Managed) 4.3(4d)
Cisco Cisco Unified Computing System (Managed) 4.3(2f)
Cisco Cisco Unified Computing System (Managed) 4.2(3m)
Cisco Cisco Unified Computing System (Managed) 4.3(5a)
Cisco Cisco Unified Computing System (Managed) 4.3(4e)
Cisco Cisco Unified Computing System (Managed) 4.1(3n)
Cisco Cisco Unified Computing System (Managed) 4.3(4f)
Cisco Cisco Unified Computing System (Managed) 4.2(3n)
Cisco Cisco Unified Computing System (Managed) 4.3(5c)
Cisco Cisco Unified Computing System (Managed) 4.2(3o)
Cisco Cisco Unified Computing System (Managed) 4.3(5d)
Cisco Cisco Unified Computing System (Managed) 4.3(6a)
Cisco Cisco Unified Computing System (Managed) 4.3(6b)
Cisco Cisco Unified Computing System (Managed) 4.3(5e)
Cisco Cisco Unified Computing System (Managed) 4.3(6c)
Cisco Cisco Unified Computing System (Managed) 4.2(3p)
Cisco Cisco Unified Computing System (Managed) 4.3(6d)
Cisco Cisco Unified Computing System (Managed) 4.3(6e)
Cisco Cisco Unified Computing System (Managed) 4.3(6f)
Cisco Cisco Unified Computing System (Managed) 4.2(3r)
Cisco Cisco Unified Computing System (Managed) 4.3(6g)
Cisco Cisco Unified Computing System (Managed) 4.3(6h)
Cisco Cisco Unified Computing System (Managed) 4.2(3s)
Cisco Cisco Unified Computing System (Managed) 4.3(6i)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a critical vulnerability in Cisco NX-OS Software's NX-API feature that allows unauthenticated remote attackers to execute arbitrary code with root privileges or cause a denial of service on affected devices. The flaw is due to insufficient input validation in the NX-API, enabling attackers to send crafted HTTP requests to exploit the system.

Detection Guidance

Check if NX-API is enabled on Cisco NX-OS devices by running 'show nxapi' in CLI. Monitor network traffic for unusual HTTP requests to NX-API ports (default 80 or 443). Use Cisco's Software Checker tool to identify vulnerable software versions.

Impact Analysis

An attacker could exploit this to execute arbitrary code with root privileges, causing process crashes, device reloads, and denial of service conditions. This could disrupt network operations and grant full control over affected Cisco devices.

Mitigation Strategies

Disable NX-API if not required using 'no feature nxapi' in CLI. Apply Cisco's Live Protect shield as a temporary mitigation. Upgrade affected devices to fixed software releases immediately as no workarounds exist.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76471. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart