CVE-2026-76465

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Oct 7, 2026
Source updated: Oct 8, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco NX-OS Software

Vendor: Cisco
Product: Cisco NX-OS Software
Platforms: Unknown
Default status: unknown

Cisco NX-OS Software · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
9.3(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(1z)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(6)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(5w)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(7)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(7k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(7a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(8)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(9)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(10)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(11)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(12)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(99w)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3w)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(99x)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3o)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3p)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3q)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(13)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3x)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(3r)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(6)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(14)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(4h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(7)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(15)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(4g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(4)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(1)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(3t)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(8)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(6)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(3s)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(3e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(3o)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(16)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(1s)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(2)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(3p)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.3(9)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(2s)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(3)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.4(7)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.5(5)	`affected`	Unavailable	Unavailable	Unavailable	None listed
9.3(17)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(2n)	`affected`	Unavailable	Unavailable	Unavailable	None listed
10.6(3s)	`affected`	Unavailable	Unavailable	Unavailable	None listed