Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-76465

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco NX-OS Software

Default version status: unknown

  • 9.3(2)affected
  • 9.3(1)affected
  • 9.3(1z)affected
  • 9.3(3)affected
  • 9.3(4)affected
  • 9.3(5)affected
  • 9.3(6)affected
  • 9.3(5w)affected
  • 9.3(7)affected
  • 9.3(7k)affected
  • 9.3(7a)affected
  • 9.3(8)affected
  • 9.3(9)affected
  • 9.3(10)affected
  • 10.3(1)affected
  • 10.3(2)affected
  • 9.3(11)affected
  • 10.3(3)affected
  • 9.3(12)affected
  • 10.4(1)affected
  • 10.3(99w)affected
  • 10.3(3w)affected
  • 10.3(99x)affected
  • 10.3(3o)affected
  • 10.3(4)affected
  • 10.3(3p)affected
  • 10.3(4a)affected
  • 10.4(2)affected
  • 10.3(3q)affected
  • 9.3(13)affected
  • 10.3(5)affected
  • 10.4(3)affected
  • 10.3(3x)affected
  • 10.3(4g)affected
  • 10.5(1)affected
  • 10.3(3r)affected
  • 10.3(6)affected
  • 9.3(14)affected
  • 10.4(4)affected
  • 10.3(4h)affected
  • 10.5(2)affected
  • 10.3(7)affected
  • 10.4(5)affected
  • 10.5(3)affected
  • 9.3(15)affected
  • 10.4(4g)affected
  • 10.5(4)affected
  • 10.6(1)affected
  • 10.5(3t)affected
  • 10.3(8)affected
  • 10.4(6)affected
  • 10.5(3s)affected
  • 10.5(3e)affected
  • 10.5(3o)affected
  • 9.3(16)affected
  • 10.6(1s)affected
  • 10.6(2)affected
  • 10.5(3p)affected
  • 10.3(9)affected
  • 10.6(2s)affected
  • 10.6(3)affected
  • 10.4(7)affected
  • 10.5(5)affected
  • 9.3(17)affected
  • 10.6(2n)affected
  • 10.6(3s)affected

References