What’s Vulnerable › Vulnerabilities
CVE-2026-20173: Cisco NX-OS Software Denial of Service Vulnerability
- Severity: medium (CVSS 5.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-07 · updated 2026-10-08
- Weakness: CWE-770
Description
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane protocols through some packet loss and temporary disruptions, causing a DoS condition. This DoS condition will clear without manual intervention soon after the high rate of traffic is stopped.
Affected products
- Cisco NX-OS: 8.2(5), 7.3(5)D1(1), 8.4(2), 8.4(3), 9.2(3), 9.2(2v) (+105)
In the news
- Cisco Advance Notification for Publication of October 7, 2026, Security Advisories
- Cisco NX-OS Software Control Plane Denial of Service Vulnerability
References
Get alerted when CVE-2026-20173 or the next vulnerability affects your stack