{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-20171",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-20171",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-05-20T16:06:38.711Z",
    "updatedAt": "2026-05-20T18:31:44.204Z",
    "importedAt": "2026-10-24T01:57:55.771Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability",
      "summary": "A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, remote attacker to trigger BGP peer flaps, resulting in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to incorrect parsing of a transitive BGP attribute. An attacker could exploit this vulnerability by sending a crafted BGP update through an established BGP peer session. If the update propagates to an affected device, it could cause the device to drop the BGP session and flap with the BGP peer that is forwarding this update, resulting in a DoS condition.",
      "affected": [
        {
          "vendor": "Cisco",
          "product": "Cisco NX-OS Software",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "10.2(1)",
              "status": "affected"
            },
            {
              "version": "10.2(1q)",
              "status": "affected"
            },
            {
              "version": "10.2(2)",
              "status": "affected"
            },
            {
              "version": "10.2(3)",
              "status": "affected"
            },
            {
              "version": "10.2(3t)",
              "status": "affected"
            },
            {
              "version": "10.2(2a)",
              "status": "affected"
            },
            {
              "version": "10.3(1)",
              "status": "affected"
            },
            {
              "version": "10.2(4)",
              "status": "affected"
            },
            {
              "version": "10.3(2)",
              "status": "affected"
            },
            {
              "version": "10.3(3)",
              "status": "affected"
            },
            {
              "version": "10.2(5)",
              "status": "affected"
            },
            {
              "version": "10.2(3v)",
              "status": "affected"
            },
            {
              "version": "10.4(1)",
              "status": "affected"
            },
            {
              "version": "10.3(99w)",
              "status": "affected"
            },
            {
              "version": "10.2(6)",
              "status": "affected"
            },
            {
              "version": "10.3(3w)",
              "status": "affected"
            },
            {
              "version": "10.3(99x)",
              "status": "affected"
            },
            {
              "version": "10.3(3o)",
              "status": "affected"
            },
            {
              "version": "10.3(4)",
              "status": "affected"
            },
            {
              "version": "10.3(3p)",
              "status": "affected"
            },
            {
              "version": "10.3(4a)",
              "status": "affected"
            },
            {
              "version": "10.4(2)",
              "status": "affected"
            },
            {
              "version": "10.3(3q)",
              "status": "affected"
            },
            {
              "version": "10.3(5)",
              "status": "affected"
            },
            {
              "version": "10.2(7)",
              "status": "affected"
            },
            {
              "version": "10.4(3)",
              "status": "affected"
            },
            {
              "version": "10.3(3x)",
              "status": "affected"
            },
            {
              "version": "10.3(4g)",
              "status": "affected"
            },
            {
              "version": "10.5(1)",
              "status": "affected"
            },
            {
              "version": "10.2(8)",
              "status": "affected"
            },
            {
              "version": "10.3(3r)",
              "status": "affected"
            },
            {
              "version": "10.3(6)",
              "status": "affected"
            },
            {
              "version": "10.4(4)",
              "status": "affected"
            },
            {
              "version": "10.3(4h)",
              "status": "affected"
            },
            {
              "version": "10.5(2)",
              "status": "affected"
            },
            {
              "version": "10.3(7)",
              "status": "affected"
            },
            {
              "version": "10.4(5)",
              "status": "affected"
            },
            {
              "version": "10.5(3)",
              "status": "affected"
            },
            {
              "version": "10.2(9)",
              "status": "affected"
            },
            {
              "version": "10.4(4g)",
              "status": "affected"
            },
            {
              "version": "10.6(1)",
              "status": "affected"
            },
            {
              "version": "10.5(3t)",
              "status": "affected"
            },
            {
              "version": "10.3(8)",
              "status": "affected"
            },
            {
              "version": "10.4(6)",
              "status": "affected"
            },
            {
              "version": "10.5(3s)",
              "status": "affected"
            },
            {
              "version": "10.5(3e)",
              "status": "affected"
            },
            {
              "version": "10.5(3o)",
              "status": "affected"
            },
            {
              "version": "10.6(1s)",
              "status": "affected"
            },
            {
              "version": "10.5(3p)",
              "status": "affected"
            }
          ]
        }
      ]
    }
  }
}