What’s Vulnerable › Products

Cisco NX-OS vulnerabilities

307 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 28 published in the last 12 months.

Check whether your Cisco NX-OS version is affected

Exploited Cisco NX-OS vulnerabilities

• CVE-2024-20399 — Cisco NX-OS Command Injection Vulnerability
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Cisco NX-OS vulnerabilities

• CVE-2026-76501 — Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76486 — Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76485 — Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76471 — Cisco NX-OS Software NX-API Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76465 — Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-76459 — Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities (CVSS 9.8)
• CVE-2026-76458 — Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities (CVSS 8.6)
• CVE-2026-76457 — Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Read Vulnerabilities (CVSS 8.6)
• CVE-2026-76456 — Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities (CVSS 8.6)
• CVE-2026-76455 — Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities (CVSS 9.8)
• CVE-2026-76453 — Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities (CVSS 8.8)
• CVE-2026-20173 — Cisco NX-OS Software Denial of Service Vulnerability (CVSS 5.8)
• CVE-2026-20038 — Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability (CVSS 5.8)
• CVE-2026-20032 — Cisco NX-OS Software Python Sandbox Escape Vulnerability (CVSS 4.4)
• CVE-2026-20212 — Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2026-20171 — Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability (CVSS 6.8)
• CVE-2026-20051 — Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability (CVSS 7.4)
• CVE-2026-20048 — Cisco NX-OS Software SNMP Denial of Service Vulnerability (CVSS 7.7)
• CVE-2026-20033 — Cisco NX-OS Software Denial of Service Vulnerability (CVSS 7.4)
• CVE-2026-20010 — Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability (CVSS 7.4)
• CVE-2025-20292 — Cisco NXOS Software Command Injection Vulnerability (CVSS 4.4)
• CVE-2025-20290 — Cisco NXOS Software Sensitive Log Information Disclosure Vulnerability (CVSS 5.5)
• CVE-2025-20262 — Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability (CVSS 5.0)
• CVE-2025-20241 — Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability (CVSS 7.4)
• CVE-2025-20191 — Multiple Cisco Products Denial of Service Vulnerability (CVSS 7.4)