CVE-2026-76471 PUBLISHED

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

Assigner: cisco
Reserved: 19.08.2026 Published: 07.10.2026 Updated: 08.10.2026

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.

The vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Cisco
Product	Cisco NX-OS Software
Versions	Default: unknown Version 9.2(3) is affected Version 9.2(2v) is affected Version 9.2(1) is affected Version 9.2(2t) is affected Version 9.2(3y) is affected Version 9.3(2) is affected Version 9.2(4) is affected Version 9.3(1) is affected Version 9.3(1z) is affected Version 9.2(2) is affected Version 9.3(3) is affected Version 9.3(4) is affected Version 9.3(5) is affected Version 9.3(6) is affected Version 9.3(5w) is affected Version 9.3(7) is affected Version 9.3(7k) is affected Version 9.3(7a) is affected Version 9.3(8) is affected Version 9.3(9) is affected Version 9.3(10) is affected Version 10.3(1) is affected Version 10.3(2) is affected Version 9.3(11) is affected Version 10.3(3) is affected Version 9.3(12) is affected Version 10.4(1) is affected Version 10.3(99w) is affected Version 10.3(3w) is affected Version 10.3(99x) is affected Version 10.3(3o) is affected Version 10.3(4) is affected Version 10.3(3p) is affected Version 10.3(4a) is affected Version 10.4(2) is affected Version 10.3(3q) is affected Version 9.3(13) is affected Version 10.3(5) is affected Version 10.4(3) is affected Version 10.3(3x) is affected Version 10.3(4g) is affected Version 10.5(1) is affected Version 10.3(3r) is affected Version 10.3(6) is affected Version 9.3(14) is affected Version 10.4(4) is affected Version 10.3(4h) is affected Version 10.5(2) is affected Version 10.3(7) is affected Version 10.4(5) is affected Version 10.5(3) is affected Version 9.3(15) is affected Version 10.4(4g) is affected Version 10.5(4) is affected Version 10.6(1) is affected Version 10.5(3t) is affected Version 10.3(8) is affected Version 10.4(6) is affected Version 10.5(3s) is affected Version 10.5(3e) is affected Version 10.5(3o) is affected Version 9.3(16) is affected Version 10.6(1s) is affected Version 10.6(2) is affected Version 10.5(3p) is affected Version 10.3(9) is affected Version 10.6(2s) is affected Version 10.6(3) is affected Version 10.4(7) is affected Version 10.5(5) is affected Version 9.3(17) is affected Version 10.6(2n) is affected Version 10.6(3s) is affected

Vendor	Cisco
Product	Cisco Unified Computing System (Managed)
Versions	Default: unknown Version 4.0(1a) is affected Version 4.1(1d) is affected Version 4.0(4f) is affected Version 4.0(4a) is affected Version 4.0(4e) is affected Version 4.0(4c) is affected Version 4.0(4h) is affected Version 4.1(1c) is affected Version 4.0(2a) is affected Version 4.1(1e) is affected Version 4.1(2a) is affected Version 4.0(2b) is affected Version 4.0(1b) is affected Version 4.0(4d) is affected Version 4.0(2e) is affected Version 4.1(1a) is affected Version 4.0(4g) is affected Version 4.0(1c) is affected Version 4.0(1d) is affected Version 4.0(4b) is affected Version 4.0(4i) is affected Version 4.0(2d) is affected Version 4.1(1b) is affected Version 4.1(2b) is affected Version 4.0(4k) is affected Version 4.1(3a) is affected Version 4.1(3b) is affected Version 4.1(2c) is affected Version 4.0(4l) is affected Version 4.1(4a) is affected Version 4.1(3c) is affected Version 4.1(3d) is affected Version 4.2(1c) is affected Version 4.2(1d) is affected Version 4.0(4m) is affected Version 4.1(3e) is affected Version 4.2(1f) is affected Version 4.1(3f) is affected Version 4.2(1i) is affected Version 4.1(3h) is affected Version 4.2(1k) is affected Version 4.2(1l) is affected Version 4.0(4n) is affected Version 4.2(1m) is affected Version 4.1(3i) is affected Version 4.2(2a) is affected Version 4.2(1n) is affected Version 4.1(3j) is affected Version 4.2(2c) is affected Version 4.2(2d) is affected Version 4.2(3b) is affected Version 4.1(3k) is affected Version 4.0(4o) is affected Version 4.2(2e) is affected Version 4.2(3d) is affected Version 4.2(3e) is affected Version 4.2(3g) is affected Version 4.1(3l) is affected Version 4.3(2b) is affected Version 4.2(3h) is affected Version 4.2(3i) is affected Version 4.3(2c) is affected Version 4.1(3m) is affected Version 4.3(2e) is affected Version 4.3(3a) is affected Version 4.2(3j) is affected Version 4.3(3c) is affected Version 4.3(4a) is affected Version 4.2(3k) is affected Version 4.3(4b) is affected Version 4.3(4c) is affected Version 4.2(3l) is affected Version 4.3(4d) is affected Version 4.3(2f) is affected Version 4.2(3m) is affected Version 4.3(5a) is affected Version 4.3(4e) is affected Version 4.1(3n) is affected Version 4.3(4f) is affected Version 4.2(3n) is affected Version 4.3(5c) is affected Version 4.2(3o) is affected Version 4.3(5d) is affected Version 4.3(6a) is affected Version 4.3(6b) is affected Version 4.3(5e) is affected Version 4.3(6c) is affected Version 4.2(3p) is affected Version 4.3(6d) is affected Version 4.3(6e) is affected Version 4.3(6f) is affected Version 4.2(3r) is affected Version 4.3(6g) is affected Version 4.3(6h) is affected Version 4.2(3s) is affected Version 4.3(6i) is affected

Exploits

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

References

cisco-sa-napi-rce-r2shwu2j

Problem Types

Heap-based Buffer Overflow cwe