Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-20038

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploit this vulnerability by sending IPv4 or IPv6 packets using UDP source and destination ports that are assigned to DHCP traffic through an affected device. A successful exploit could allow the attacker to bypass EPG contracts on the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco NX-OS System Software in ACI Mode

Default version status: unknown

  • 15.2(1g)affected
  • 15.2(2e)affected
  • 15.2(2f)affected
  • 15.2(2g)affected
  • 15.2(2h)affected
  • 15.2(3f)affected
  • 15.2(3e)affected
  • 15.2(3g)affected
  • 15.2(4d)affected
  • 15.2(4e)affected
  • 15.2(5c)affected
  • 15.2(5d)affected
  • 16.0(1g)affected
  • 15.2(5e)affected
  • 15.2(4f)affected
  • 15.2(6e)affected
  • 15.2(6h)affected
  • 16.0(1j)affected
  • 15.2(6g)affected
  • 15.2(7f)affected
  • 15.2(7g)affected
  • 16.0(2h)affected
  • 15.2(8d)affected
  • 16.0(2j)affected
  • 15.2(8e)affected
  • 16.0(3d)affected
  • 16.0(3e)affected
  • 15.2(8f)affected
  • 15.2(8g)affected
  • 15.3(1d)affected
  • 15.2(8h)affected
  • 16.0(4c)affected
  • 15.3(2a)affected
  • 15.2(8i)affected
  • 16.0(5h)affected
  • 15.3(2b)affected
  • 16.0(3g)affected
  • 16.0(5j)affected
  • 15.3(2c)affected
  • 16.0(6c)affected
  • 15.3(2d)affected
  • 16.1(1f)affected
  • 16.0(7e)affected
  • 16.0(8e)affected
  • 15.3(2e)affected
  • 16.0(8f)affected
  • 16.1(2f)affected
  • 16.1(2g)affected
  • 15.3(2f)affected
  • 16.0(9c)affected
  • 16.1(3f)affected
  • 16.0(9d)affected
  • 16.0(6h)affected
  • 16.0(8h)affected
  • 16.1(3g)affected
  • 16.0(9e)affected
  • 16.1(4h)affected
  • 16.1(5e)affected
  • 16.2(1g)affected
  • 16.0(9f)affected
  • 16.2(2e)affected

References