Free tools Windows power users keep installed
One-click scans. No signup required.
Cisco disclosed five critical NX-OS vulnerabilities on October 7, 2026, that could let an unauthenticated attacker execute code with root privileges or cause a denial of service on certain Nexus 3000 and Nexus 9000 switches. Exposure is conditional: the switch must be running an affected standalone NX-OS release and have the vulnerable feature—and, for some NGOAM flaws, related functions—enabled. Cisco rates each vulnerability group CVSS 9.8. Administrators should check their exact platform, release and configuration in Cisco’s advisories and Software Checker, then install the applicable fixed release.
What the Cisco Nexus vulnerabilities can do
The five vulnerabilities span three NX-OS features: NX-API, Next Generation OAM (NGOAM) and MPLS OAM. Cisco says crafted network traffic could trigger remote code execution with root privileges or denial of service, including process crashes that may cause a device to reload. These are potential outcomes, not evidence that every Nexus switch is exposed or has been compromised.
As an Amazon Associate I earn from qualifying purchases.
Cisco assigned a CVSS base score of 9.8 to the vulnerabilities. That score describes severity; it is not a victim count or a measure of confirmed exploitation.
Which Nexus switches and configurations may be affected?
The advisories cover Nexus 3000 and Nexus 9000 switches running standalone NX-OS when they meet the relevant release and feature conditions. Check the Cisco advisory for each feature and use Cisco’s Software Checker for the exact product and software release; fixed releases vary by platform and release branch.
#1 Best Overall
- UNLEASH THE FULL POTENTIAL OF YOUR DATA CENTER WITH UNMATCHED CONNECTIVITY: The Cisco Systems N9K-C93180YC-EX Nexus 9300 switch offers 48 fixed 10/25-Gbps SFP+ ports and 6 fixed 100-Gbps QSFP28 ports, providing you with maximum flexibility and high-bandwidth connectivity to handle even the most demanding applications
- MINIMIZE LATENCY AND MAXIMIZE PERFORMANCE WITH CUT-THROUGH SWITCHING ARCHITECTURE: With a latency of less than 1 microsecond, the N9K-C93180YC-EX switch uses a cut-through switching architecture to provide high-performance computing and big data processing, ensuring smooth and seamless operations.
- TAKE YOUR NETWORK VIRTUALIZATION TO THE NEXT LEVEL WITH VXLAN SUPPORT: The switch's Virtual Extensible LAN (VXLAN) support allows for efficient network virtualization, enabling you to create scalable and highly available networks that are easy to manage and maintain.
- SIMPLIFY YOUR NETWORK AUTOMATION AND MANAGEMENT WITH CISCO APPLICATION CENTRIC INFRASTRUCTURE (ACI): The N9K-C93180YC-EX switch supports Cisco's ACI, a powerful solution for network automation and management that simplifies the deployment and management of virtual and physical networks.
- MAXIMIZE NETWORK AVAILABILITY WITH HOT-SWAPPABLE POWER SUPPLIES AND FANS: The switch is designed for high availability with features such as hot-swappable power supplies and fans, redundant power supplies, and a modular design that allows for easy upgrades and maintenance, ensuring your network stays up and running 24/7.
| Feature and CVEs | Exposure condition | What to know |
|---|---|---|
| NX-API CVE-2026-76471 |
A vulnerable standalone NX-OS release with NX-API enabled. | Cisco says NX-API is disabled by default on Nexus 3000 and Nexus 9000. Check with show feature | include nxapi. Cisco NX-API advisory. |
| NGOAM CVE-2026-76485, CVE-2026-76486, CVE-2026-76501 |
NGOAM must be enabled. CVE-2026-76486 also requires SRv6 or NV Overlay; the NV Overlay case has additional VXLAN EVPN/NVE/VTEP conditions. CVE-2026-76501 requires SRv6. | Nexus 3000 does not support SRv6, and only a subset of Nexus 9000 supports it. Consult the advisory for CLI checks and full conditions. Cisco identifies Nexus 7000 and Nexus 9000 in ACI mode as not affected by this advisory. Cisco NGOAM advisory. |
| MPLS OAM CVE-2026-76465 |
A vulnerable standalone NX-OS release with MPLS OAM enabled. | Cisco says MPLS OAM is disabled by default. Nexus 9000 switches with Silicon One ASICs do not support MPLS OAM and are not affected by this issue. Cisco MPLS OAM advisory. |
The advisories’ scope is not a substitute for checking your own device: model, operating mode, NX-OS release and enabled features all matter. Cisco’s Software Checker and current advisory tables should be treated as authoritative for applicability and fixed-release details.
How to check exposure and respond
- Inventory the switch. Record its Nexus model, whether it runs standalone NX-OS or ACI mode, its NX-OS release and the relevant enabled features.
- Check feature configuration. For NX-API, Cisco documents
show feature | include nxapi. Use the NGOAM advisory’s CLI checks to verify NGOAM, NV Overlay and SRv6 conditions; consult the MPLS OAM advisory for its feature check. - Identify the applicable fixed release. Enter the exact platform and software in Cisco’s Software Checker and confirm against the advisory’s release table. Cisco updated NX-API fixed-release information on October 8, 2026, so do not assume a release number applies across models or branches.
- Plan and install the fixed software. Follow the fixed release applicable to the device. Cisco describes feature mitigations as temporary until the software update is installed.
- Reduce exposure while an upgrade is pending, where safe. If a vulnerable feature is unnecessary, evaluate disabling it with the network operations team. Cisco says disabling NGOAM removes the attack vector for its three listed vulnerabilities; disabling NX-API or MPLS OAM may also be an option when those services are not required. Check service and monitoring dependencies before changing configuration.
Cisco says Live Protect shields are available as temporary mitigations for the five flaws. They can help bridge the time until an upgrade is scheduled, but they are not a replacement for fixed software. Cisco’s advisories state that no workarounds address the underlying vulnerabilities.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is known about exploitation
At the time of its NGOAM advisory’s publication, Cisco said its Product Security Incident Response Team was not aware of public announcements or malicious use of the vulnerabilities described in that advisory. Cisco also said the issues were found during internal security testing. This is a time-bound statement about NGOAM, not a guarantee that exploitation cannot occur or a status update for all five CVEs. See the Cisco NGOAM advisory for its current status.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Rank #4
- Item Package Dimension: 24.0L X 20.0W X 6.0H Inches
- Item Package Weight - 23.2 Pounds
- Item Package Quantity - 1
- Product Type - Electronic Switch
Rank #3
- Modular: Yes
- Port/Expansion Slot Details: 48 x 10 Gigabit Ethernet Expansion Slot
- Port/Expansion Slot Details: 6 x 40 Gigabit Ethernet Expansion Slot
- Media Type Supported: Optical Fiber
- Ethernet Technology: 10 Gigabit Ethernet
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
