CVE-2026-76465: Free of Memory not on the Heap in Cisco Cisco NX-OS Software
Description
A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.
CVSS v3.1
Score 9.8critical
Affected software
Cisco
Cisco NX-OS Software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Cisco NX-OS Software affects the MPLS Operation, Administration, and Maintenance (OAM) feature on Nexus 3000 and 9000 Series Switches. An attacker can exploit improper validation of MPLS echo-request packets by sending a specially crafted packet to an affected device's IP address. Successful exploitation can lead to arbitrary code execution with root privileges or cause process crashes resulting in denial of service conditions.
Potential Impact
An unauthenticated remote attacker can gain root-level code execution privileges or cause a denial of service by crashing processes and forcing device reloads. This can severely impact network availability and security on affected Cisco Nexus switches.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- cisco
- Date Reserved
- 2026-08-19T12:02:03.637Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac6748a2cdf04f656647330
Added to database: 10/07/2026, 16:34:18 UTC
Last enriched: 10/07/2026, 16:50:48 UTC
Last updated: 10/08/2026, 05:48:07 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.