Cisco Nexus

Name: Cisco Nexus
Brand: Cisco

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical6high4medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-20212US	critical9.8	0.83% (57th)	Exploit	no fix	2026-09-02	≤ vers:unknown/*
CVE-2025-20292US	—	3.17% (88th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2025-20344US	high7.2	0.59% (48th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2026-20274US	critical9.8	0.53% (45th)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2026-20280US	high8.8	0.50% (42nd)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2026-20279US	critical9.8	0.49% (42nd)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2026-20278US	high8.8	0.49% (42nd)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2026-20276US	high8.6	0.47% (40th)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2024-20371US	—	0.46% (40th)	—	no fix	2024-11-06	≤ 3550-F <1.17.2
CVE-2026-20277US	high8.2	0.41% (35th)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2025-20262US	—	0.35% (29th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2026-20275US	high8.8	0.33% (26th)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2026-20038US	medium5.8	0.30% (23rd)	—	no fix	2026-10-07	3 versions
CVE-2025-20348US	medium5.0	0.30% (22nd)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2025-20241US	—	0.28% (20th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2025-20347US	—	0.26% (17th)	—	no fix	2025-08-27	≤ vers:unknown/*
CVE-2026-20355US	medium5.9OT elevated	0.20% (10th)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2026-20354US	medium5.9	0.20% (10th)	—	no fix	2026-09-02	≤ vers:unknown/*
CVE-2025-20290US	—	0.14% (3rd)	—	no fix	2025-08-27	≤ vers:unknown/*

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control2 CVEs
CWE-354Improper Validation of Integrity Check Value2 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-1327Binding to an Unrestricted IP Address1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.