Skip to content
VulniPulse
Sign in
Advisory severityCritical9.8Cisco Updated

Critical [CVE-2026-76471] Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

This critical-severity Cisco advisory covers CVE-2026-76471 affecting NX-OS Software, Nexus 3000 Series Switches, Nexus 9000 Series Switches.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

cisco-sa-napi-rce-r2shwu2j Source published Source updated

VulniPulse record published Record updated

CVE-2026-76471
Affected products & platforms
CiscoSwitchesNexusNX-OSNexus 3000
Open source advisory

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.

The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device.

A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of October 7, 2026, Security Advisories.

For further documentation of improvements and fixes in Cisco NX-OS Software, see Cisco NX-OS Software Security Hardening Release: October 2026.

Affected products named by the advisory: Nexus 3000 Series Switches; Nexus 9000 Series Switches; Unified Computing System (Managed).

Affected versions
  • Scope: This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco NX-OS Software and have the NX-API feature enabled:
  • 4.2 and earlier — Migrate to a fixed release
  • Release 4.3 (first fixed: 4.3(6j))

Official advisory · high-confidence parse· fetched 10 hours ago·verify at source

Fixed versions
  • 4.3(6j)

Official advisory · high-confidence parse· fetched 10 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
  • Release 4.2 and earlier: migrate to a fixed release.
  • Release 4.3: upgrade to 4.3(6j).
Temporary workarounds
  • There are no workarounds that address this vulnerability.
  • Live Protect Shield
  • Cisco has released a Live Protect shield for CVE-2026-76471 to temporarily mitigate this vulnerability for Cisco NX-OS Software.
  • For information about Live Protect for Cisco NX-OS Software, see Cisco Nexus 9000 Series NX-OS Security Configuration Guide.
  • Note: Live Protect shields are temporary mitigations to bridge the gap until software updates can be scheduled. To remediate this vulnerability, upgrade to a fixed software release as noted in the Fixed Software section of this advisory.

Official advisory · high-confidence parse· fetched 10 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.