Skip to content
VulniPulse
Sign in
Advisory severityCritical9.8Cisco

Critical [CVE-2026-20212] Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability

This critical-severity Cisco advisory covers CVE-2026-20212 affecting NX-OS Software, Nexus 9000 Series Switches.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

cisco-sa-n9k-s1-rce-EH8dEtr Source published Source updated

VulniPulse record published Record updated

CVE-2026-20212
Affected products & platforms
CiscoSwitchesNexusNX-OSNexus 9000
Open source advisory

Get an email when Cisco publishes the next one.

VulniPulse checks Cisco's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.

Start your free month

Summary

An unauthenticated remote attacker could exploit a flaw in the Silicon One integration for Cisco Nexus 9000 Series Switches to execute code with root privileges.

Affected products named by the advisory: NX-OS Software.

Affected versions
  • Scope: This vulnerability affects Cisco Nexus 9000 Series Switches if they include a Silicon One ASIC.

Official advisory · high-confidence parse· fetched 22 days ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists. Confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 22 days ago·verify at source

Mitigation checklist

Temporary workarounds
  • There is a workaround that addresses this vulnerability.
  • To prevent remote exploitation of this vulnerability, use infrastructure access control lists (iACLs) to allow only required management and control plane traffic that is destined to the affected device. Alternatively, the iACLs may be used to explicitly deny all TCP packets that are destined to a locally configured IP address with a destination port of 43210 or 43211.
  • For more information about iACLs, see the Cisco NX-OS Software Hardening Guide.
  • While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer depl…
  • Live Protect Shields
  • Cisco has released a Live Protect shield for CVE-2026-20212 to temporarily mitigate this vulnerability in Cisco NX-OS Software.
  • For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide.
  • Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To fully remediate this vulnerability, upgrade to a fixed software release, which can be found using the Cisco Software Checker.

Official advisory · high-confidence parse· fetched 22 days ago·verify at source

More Cisco advisories

All Cisco advisories

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alertsSee app features

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.