PT-2026-107583

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

PT-2026-107597

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description Improper access control issues exist within the software, which are categorized under Common Weakness Enumeration CWE CWE-284. This refers to a situation where the software does not...

PT-2026-107600

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to the improper handling of exceptional conditions, which refers to a failure to account for unexpected states or errors during software execution. Recommendations At...

PT-2026-107601

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An out-of-bounds write issue exists in the software. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, which can lead to memory corruption...

PT-2026-107604

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches affected versions not specified Cisco NX-OS Software for Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the MPLS Operation,...

PT-2026-107615

Name of the Vulnerable Software and Affected Versions Cisco Nexus 3000 Series Switches affected versions not specified Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature of Cisco NX-OS...

PT-2026-107598

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description An issue exists due to improper input validation of special elements used in a command. This flaw is categorized under CWE-20, which refers to improper input validation, where the softwar...

Cisco NX-OS Software Control Plane DoS (cisco-sa-nxos-nscpdos-SnderkC7)

According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate...

@nx/express (>=23.0.0-beta.0, <=23.1.0), @nx/nest (>=23.0.0-beta.0, <=23.1.0) +1 more potentially affected by CVE-2026-104859 via @nx/docker (>=23.0.0, <=23.1.0-rc.3)

@nx/docker NPM version =23.0.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.1.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...

GHSA-6VC5-VF29-FFR2 @nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

@nx/docker: OS command injection in the @nx/docker release pipeline

Summary The @nx/docker release pipeline builds its docker invocations as shell command strings, interpolating release.docker.repositoryName and registryUrl from Nx configuration into them. Because those strings are handed to /bin/sh -c, a crafted repository or registry name executes as a command...

EUVD-2026-91767

@nx/docker: OS command injection in the @nx/docker release pipeline...

@hatung/nx-nest-ddd (>=1.0.0, <=1.1.2), @naxodev/nx-cloudflare (>=5.0.0-rc.0, <=5.0.2) +8 more potentially affected by CVE-2026-104859 via @nx/docker (>=21.4.0, <=22.7.7)

@nx/docker NPM version =21.4.0, =1.0.0, =5.0.0-rc.0, =0.1.29, =0.2.3, =21.4.0-beta.4, =21.4.0-beta.4, =21.4.0-beta.4, =0.7.6, =0.0.3, =0.3.5 - @ziacik/azure-func 5.0.0 Source cves: CVE-2026-104859 Source advisory: OSV:GHSA-6VC5-VF29-FFR2...

NPM: Nx: OS command injection via git revisions and remote refs

NPM: Nx: OS command injection via git revisions and remote refs vulnerability discovered by ? in WordPress Npm nx versions = 14.0.0, 22.7.8...

Nx: OS command injection via git revisions and remote refs

Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...

GHSA-W2VW-W76X-QR89 Nx: OS command injection via git revisions and remote refs

Summary Nx core builds several git invocations as shell command strings with untrusted values interpolated into them, so a value that should be a git revision or ref is parsed by /bin/sh instead. Two entry points are reachable by an attacker: affected commands, where defaultBase /...

EUVD-2026-91762

Nx daemon and plugin worker sockets are accessible to other local users...

GHSA-W3VV-58GJ-GW77 Nx daemon and plugin worker sockets are accessible to other local users

Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...

NPM: Nx daemon and plugin worker sockets are accessible to other local users

NPM: Nx daemon and plugin worker sockets are accessible to other local users vulnerability discovered by ? in WordPress Npm nx versions = 14.6.0, 22.7.9...

@aws/nx-plugin (>=1.0.0-rc.24, <=1.0.0-rc.87), @brabander/config-eslint (>=0.1.1, <=0.5.1) +175 more potentially affected by CVE-2026-104854 via nx (>=23.0.0, <=23.1.1)

nx NPM version =23.0.0, =1.0.0-rc.24, =0.1.1, =1.0.0-alpha.0, =0.3.1, =1.0.0-rc.39, =0.0.2-10, =1.1.0-alpha.3, =0.20.2, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.0.0-beta.0, =23.1.1 and more Source cves: CVE-2026-104854 Source advisory: OSV:GHSA-W3VV-58GJ-GW77...