CVE-2026-76457

The Cisco NX-OS Software is subject to multiple out-of-bounds read vulnerabilities, identified under CWE-125 , following an internal security review. These issues are addressed in the October 2026 Software Security Hardening Release . The vulnerabilities have a HIGH base severity (CVSS 3.1: 8.6) ...

CVE-2026-76457 Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Read Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76456 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76456

The Cisco NX-OS Software is affected by multiple vulnerabilities categorized under CWE-20 (Improper Input Validation) . These issues stem from the improper validation of special elements used in a command issue. The Cisco NX-OS engineering team identified these vulnerabilities through an internal...

CVE-2026-76454 Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

CVE-2026-76453

The Cisco NX-OS Software is affected by multiple internally discovered vulnerabilities categorized under CWE-707 (Improper Neutralization) . These issues were identified during a proactive security review and are addressed in the October 2026 Software Security Hardening Release . The vulnerabilit...

EUVD-2026-94449

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

CVE-2026-20173

A vulnerability in Cisco NX-OS Software allows an unauthenticated, remote attacker to cause a denial of service (DoS) condition by exhausting system resources. The root cause is that rate limiting was improperly applied to certain protocols. An attacker can exploit this by sending a high rate of ...

CVE-2026-20173 Cisco NX-OS Software Denial of Service Vulnerability

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

CVE-2026-20173 Cisco NX-OS Software Denial of Service Vulnerability

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

EUVD-2026-94447

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CVE-2026-20032 Cisco NX-OS Software Python Sandbox Escape Vulnerability

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CVE-2026-20032 Cisco NX-OS Software Python Sandbox Escape Vulnerability

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CVE-2026-20032

A vulnerability in the Python interpreter of Cisco NX-OS Software allows an authenticated, local attacker with low privileges to escape the Python sandbox . The root cause is insufficient validation of user-supplied input , which can be exploited by manipulating specific functions within the inte...

CVE-2026-62253 Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions JWTMiddleware and JWTMiddlewareV4 immediately return nextc when jwtSecret == "". The JWT secret defaults to an empty string. On a default installation, all protected API endpoints under...

Cisco NX-OS Software Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These...

Cisco NX-OS Software Control Plane Denial of Service Vulnerability

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service DoS condition, o...

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of data that is...

Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, has conducted a comprehensive internal security review. This review resulted in software hardening releases...