Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as Next Generation OAM (NGOAM), could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to improper input validation of IP traffic when NGOAM is enabled. An attacker could exploit these vulnerabilities by sending crafted packets to an IP interface on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device a
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- IOS XE / IOS XR / NX-OS
- EPSS
- 0.005 (p45)
- Fix
- available
- Exposure class
- Edge / VPN / firewall
Why it ranks 37 (Notable)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Cisco)
- Covered by 2 independent sources
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-76485 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-76486 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-76501 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.