DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco Nexus und Cisco NX-OS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-10-07
Ein Angreifer kann mehrere Schwachstellen in Cisco Nexus und Cisco NX-OS ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
01
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-76501US | critical9.8 | — | ||
A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthentic… | ||||
| CVE-2026-76486US | critical9.8 | — | ||
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to ex… | ||||
| CVE-2026-76485US | critical9.8 | — | ||
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to ex… | ||||
| CVE-2026-76471US | critical9.8 | — | ||
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of se… | ||||
| CVE-2026-76465US | critical9.8 | — | ||
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switch… | ||||
| CVE-2026-76459US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie… | ||||
| CVE-2026-76458US | high8.6 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie… | ||||
| CVE-2026-76457US | high8.6 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie… | ||||
| CVE-2026-76456US | high8.6 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie… | ||||
| CVE-2026-76455US | critical9.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie… | ||||
| CVE-2026-76453US | high8.8 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie… | ||||
| CVE-2026-20173US | medium5.8 | — | ||
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition.
This vulnerabil… | ||||
| CVE-2026-20038US | medium5.8 | — | ||
A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass… | ||||
| CVE-2026-20032US | medium4.4 | — | ||
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorize… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Security Advisory cisco-sa-aci-epgcbp-SfDU7NLf vom 2026-10-07external
- Cisco Security Advisory cisco-sa-hardening-nxosw1-cWzSbtR vom 2026-10-07external
- Cisco Security Advisory cisco-sa-moam-rce-uBTzYV7 vom 2026-10-07external
- Cisco Security Advisory cisco-sa-napi-rce-r2shwu2j vom 2026-10-07external
- Cisco Security Advisory cisco-sa-ngoam-rce-LWKQ4BU vom 2026-10-07external
- Cisco Security Advisory cisco-sa-nxos-mppe-dhKZAFgb vom 2026-10-07external
- Cisco Security Advisory cisco-sa-nxos-nscpdos-SnderkC7 vom 2026-10-07external
- WID-SEC-W-2026-3810 - CSAF Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan