CVE-2026-76486: Stack-based Buffer Overflow in Cisco Cisco NX-OS Software
Description
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service (DoS) on an affected device. This vulnerability is due to improper input validation of IP traffic when the NGOAM feature is enabled. An attacker could exploit this vulnerability by sending crafted packets to an IP interface on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes resulting in a reload and DoS condition.
CVSS v3.1
Score 9.8critical
Affected software
Cisco
Cisco NX-OS Software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability arises from improper input validation of IP traffic when the NGOAM feature is enabled in Cisco NX-OS Software. An attacker can exploit this by sending specially crafted packets to an affected device's IP interface, leading to a stack-based buffer overflow. Successful exploitation can result in arbitrary code execution with root privileges or cause process crashes that lead to device reloads and denial-of-service conditions.
Potential Impact
Exploitation can lead to full system compromise with root-level code execution or denial-of-service conditions due to process crashes and device reloads. The vulnerability is remotely exploitable without authentication, increasing its risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- cisco
- Date Reserved
- 2026-08-19T12:02:03.639Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac6748c2cdf04f65664733c
Added to database: 10/07/2026, 16:34:20 UTC
Last enriched: 10/07/2026, 16:48:41 UTC
Last updated: 10/08/2026, 04:48:07 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.