Critical [CVE-2026-76485 +2] Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
This critical-severity Cisco advisory covers CVE-2026-76485 and CVE-2026-76486 and 1 more CVE affecting NX-OS Software, Nexus 3000 Series Switches, Nexus 9000 Series Switches.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations. This bulletin covers 3 CVEs; its score, affected versions and guidance may apply to different issues within that bulletin.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
Multiple vulnerabilities in the Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as Next Generation OAM (NGOAM), could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.
These vulnerabilities are due to improper input validation of IP traffic when NGOAM is enabled. An attacker could exploit these vulnerabilities by sending crafted packets to an IP interface on an affected device.
A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.
Note: Feature requirements vary for each vulnerability. For details, see the Vulnerable Products section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of October 7, 2026, Security Advisories.
For further documentation of improvements and fixes in Cisco NX-OS Software, see Cisco NX-OS Software Security Hardening Release: October 2026.
- Scope: These vulnerabilities affect Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode if NGOAM is enabled and specific features are configured, as detailed in the following list:
Official advisory · high-confidence parse· fetched 11 hours ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 11 hours ago·verify at source
Mitigation checklist
- There are no workarounds that address these vulnerabilities.
- If the NGOAM feature is not required, disabling it removes the attack vector and is a mitigation for all three vulnerabilities. Disable the NGOAM by using the Cisco NX-OS CLI command no feature ngoam in global configuration mode on a Cisco Nexus 3000 Series or 9000 Series Switch.
Official advisory · high-confidence parse· fetched 11 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.