CVE-2026-76471

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.  The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

Configurations

No configuration.

History

07 Oct 2026, 17:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-07 17:17

Updated : 2026-10-08 20:08

NVD link : CVE-2026-76471

Mitre link : CVE-2026-76471

CVE.ORG link : CVE-2026-76471

JSON object : View

Products Affected

No product.

CWE

CWE-122

Heap-based Buffer Overflow

{"id": "CVE-2026-76471", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76471", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-07T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco NX-OS Software", "versions": [{"status": "affected", "version": "9.2(3)"}, {"status": "affected", "version": "9.2(2v)"}, {"status": "affected", "version": "9.2(1)"}, {"status": "affected", "version": "9.2(2t)"}, {"status": "affected", "version": "9.2(3y)"}, {"status": "affected", "version": "9.3(2)"}, {"status": "affected", "version": "9.2(4)"}, {"status": "affected", "version": "9.3(1)"}, {"status": "affected", "version": "9.3(1z)"}, {"status": "affected", "version": "9.2(2)"}, {"status": "affected", "version": "9.3(3)"}, {"status": "affected", "version": "9.3(4)"}, {"status": "affected", "version": "9.3(5)"}, {"status": "affected", "version": "9.3(6)"}, {"status": "affected", "version": "9.3(5w)"}, {"status": "affected", "version": "9.3(7)"}, {"status": "affected", "version": "9.3(7k)"}, {"status": "affected", "version": "9.3(7a)"}, {"status": "affected", "version": "9.3(8)"}, {"status": "affected", "version": "9.3(9)"}, {"status": "affected", "version": "9.3(10)"}, {"status": "affected", "version": "10.3(1)"}, {"status": "affected", "version": "10.3(2)"}, {"status": "affected", "version": "9.3(11)"}, {"status": "affected", "version": "10.3(3)"}, {"status": "affected", "version": "9.3(12)"}, {"status": "affected", "version": "10.4(1)"}, {"status": "affected", "version": "10.3(99w)"}, {"status": "affected", "version": "10.3(3w)"}, {"status": "affected", "version": "10.3(99x)"}, {"status": "affected", "version": "10.3(3o)"}, {"status": "affected", "version": "10.3(4)"}, {"status": "affected", "version": "10.3(3p)"}, {"status": "affected", "version": "10.3(4a)"}, {"status": "affected", "version": "10.4(2)"}, {"status": "affected", "version": "10.3(3q)"}, {"status": "affected", "version": "9.3(13)"}, {"status": "affected", "version": "10.3(5)"}, {"status": "affected", "version": "10.4(3)"}, {"status": "affected", "version": "10.3(3x)"}, {"status": "affected", "version": "10.3(4g)"}, {"status": "affected", "version": "10.5(1)"}, {"status": "affected", "version": "10.3(3r)"}, {"status": "affected", "version": "10.3(6)"}, {"status": "affected", "version": "9.3(14)"}, {"status": "affected", "version": "10.4(4)"}, {"status": "affected", "version": "10.3(4h)"}, {"status": "affected", "version": "10.5(2)"}, {"status": "affected", "version": "10.3(7)"}, {"status": "affected", "version": "10.4(5)"}, {"status": "affected", "version": "10.5(3)"}, {"status": "affected", "version": "9.3(15)"}, {"status": "affected", "version": "10.4(4g)"}, {"status": "affected", "version": "10.5(4)"}, {"status": "affected", "version": "10.6(1)"}, {"status": "affected", "version": "10.5(3t)"}, {"status": "affected", "version": "10.3(8)"}, {"status": "affected", "version": "10.4(6)"}, {"status": "affected", "version": "10.5(3s)"}, {"status": "affected", "version": "10.5(3e)"}, {"status": "affected", "version": "10.5(3o)"}, {"status": "affected", "version": "9.3(16)"}, {"status": "affected", "version": "10.6(1s)"}, {"status": "affected", "version": "10.6(2)"}, {"status": "affected", "version": "10.5(3p)"}, {"status": "affected", "version": "10.3(9)"}, {"status": "affected", "version": "10.6(2s)"}, {"status": "affected", "version": "10.6(3)"}, {"status": "affected", "version": "10.4(7)"}, {"status": "affected", "version": "10.5(5)"}, {"status": "affected", "version": "9.3(17)"}, {"status": "affected", "version": "10.6(2n)"}, {"status": "affected", "version": "10.6(3s)"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System (Managed)", "versions": [{"status": "affected", "version": "4.0(1a)"}, {"status": "affected", "version": "4.1(1d)"}, {"status": "affected", "version": "4.0(4f)"}, {"status": "affected", "version": "4.0(4a)"}, {"status": "affected", "version": "4.0(4e)"}, {"status": "affected", "version": "4.0(4c)"}, {"status": "affected", "version": "4.0(4h)"}, {"status": "affected", "version": "4.1(1c)"}, {"status": "affected", "version": "4.0(2a)"}, {"status": "affected", "version": "4.1(1e)"}, {"status": "affected", "version": "4.1(2a)"}, {"status": "affected", "version": "4.0(2b)"}, {"status": "affected", "version": "4.0(1b)"}, {"status": "affected", "version": "4.0(4d)"}, {"status": "affected", "version": "4.0(2e)"}, {"status": "affected", "version": "4.1(1a)"}, {"status": "affected", "version": "4.0(4g)"}, {"status": "affected", "version": "4.0(1c)"}, {"status": "affected", "version": "4.0(1d)"}, {"status": "affected", "version": "4.0(4b)"}, {"status": "affected", "version": "4.0(4i)"}, {"status": "affected", "version": "4.0(2d)"}, {"status": "affected", "version": "4.1(1b)"}, {"status": "affected", "version": "4.1(2b)"}, {"status": "affected", "version": "4.0(4k)"}, {"status": "affected", "version": "4.1(3a)"}, {"status": "affected", "version": "4.1(3b)"}, {"status": "affected", "version": "4.1(2c)"}, {"status": "affected", "version": "4.0(4l)"}, {"status": "affected", "version": "4.1(4a)"}, {"status": "affected", "version": "4.1(3c)"}, {"status": "affected", "version": "4.1(3d)"}, {"status": "affected", "version": "4.2(1c)"}, {"status": "affected", "version": "4.2(1d)"}, {"status": "affected", "version": "4.0(4m)"}, {"status": "affected", "version": "4.1(3e)"}, {"status": "affected", "version": "4.2(1f)"}, {"status": "affected", "version": "4.1(3f)"}, {"status": "affected", "version": "4.2(1i)"}, {"status": "affected", "version": "4.1(3h)"}, {"status": "affected", "version": "4.2(1k)"}, {"status": "affected", "version": "4.2(1l)"}, {"status": "affected", "version": "4.0(4n)"}, {"status": "affected", "version": "4.2(1m)"}, {"status": "affected", "version": "4.1(3i)"}, {"status": "affected", "version": "4.2(2a)"}, {"status": "affected", "version": "4.2(1n)"}, {"status": "affected", "version": "4.1(3j)"}, {"status": "affected", "version": "4.2(2c)"}, {"status": "affected", "version": "4.2(2d)"}, {"status": "affected", "version": "4.2(3b)"}, {"status": "affected", "version": "4.1(3k)"}, {"status": "affected", "version": "4.0(4o)"}, {"status": "affected", "version": "4.2(2e)"}, {"status": "affected", "version": "4.2(3d)"}, {"status": "affected", "version": "4.2(3e)"}, {"status": "affected", "version": "4.2(3g)"}, {"status": "affected", "version": "4.1(3l)"}, {"status": "affected", "version": "4.3(2b)"}, {"status": "affected", "version": "4.2(3h)"}, {"status": "affected", "version": "4.2(3i)"}, {"status": "affected", "version": "4.3(2c)"}, {"status": "affected", "version": "4.1(3m)"}, {"status": "affected", "version": "4.3(2e)"}, {"status": "affected", "version": "4.3(3a)"}, {"status": "affected", "version": "4.2(3j)"}, {"status": "affected", "version": "4.3(3c)"}, {"status": "affected", "version": "4.3(4a)"}, {"status": "affected", "version": "4.2(3k)"}, {"status": "affected", "version": "4.3(4b)"}, {"status": "affected", "version": "4.3(4c)"}, {"status": "affected", "version": "4.2(3l)"}, {"status": "affected", "version": "4.3(4d)"}, {"status": "affected", "version": "4.3(2f)"}, {"status": "affected", "version": "4.2(3m)"}, {"status": "affected", "version": "4.3(5a)"}, {"status": "affected", "version": "4.3(4e)"}, {"status": "affected", "version": "4.1(3n)"}, {"status": "affected", "version": "4.3(4f)"}, {"status": "affected", "version": "4.2(3n)"}, {"status": "affected", "version": "4.3(5c)"}, {"status": "affected", "version": "4.2(3o)"}, {"status": "affected", "version": "4.3(5d)"}, {"status": "affected", "version": "4.3(6a)"}, {"status": "affected", "version": "4.3(6b)"}, {"status": "affected", "version": "4.3(5e)"}, {"status": "affected", "version": "4.3(6c)"}, {"status": "affected", "version": "4.2(3p)"}, {"status": "affected", "version": "4.3(6d)"}, {"status": "affected", "version": "4.3(6e)"}, {"status": "affected", "version": "4.3(6f)"}, {"status": "affected", "version": "4.2(3r)"}, {"status": "affected", "version": "4.3(6g)"}, {"status": "affected", "version": "4.3(6h)"}, {"status": "affected", "version": "4.2(3s)"}, {"status": "affected", "version": "4.3(6i)"}], "defaultStatus": "unknown"}]}], "published": "2026-10-07T17:17:00.230", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j", "source": "psirt@cisco.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. \r\n\r\nThe vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition."}], "lastModified": "2026-10-08T20:08:45.857", "sourceIdentifier": "psirt@cisco.com"}