CVE-2026-76501: Stack-based Buffer Overflow in Cisco Cisco NX-OS Software
Description
A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) on an affected device. This vulnerability is due to improper input validation of IP traffic when the NGOAM and SRv6 features are enabled. An attacker could exploit this vulnerability by sending crafted packets to an IP interface on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes resulting in a reload and DoS condition.
CVSS v3.1
Score 9.8critical
Affected software
Cisco
Cisco NX-OS Software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Cisco NX-OS Software's SRv6 OAM feature (NGOAM) is caused by improper input validation of IP traffic, leading to a stack-based buffer overflow. An attacker can exploit this by sending specially crafted packets to an IP interface on the device, potentially resulting in arbitrary code execution with root privileges or causing process crashes that lead to device reloads and denial of service.
Potential Impact
Successful exploitation can lead to full system compromise with root-level code execution or denial of service conditions due to process crashes and device reloads. The vulnerability is remotely exploitable without authentication, increasing its severity and risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, consider disabling the NGOAM and SRv6 features if feasible to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- cisco
- Date Reserved
- 2026-08-19T12:02:03.641Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ac6748c2cdf04f656647341
Added to database: 10/07/2026, 16:34:20 UTC
Last enriched: 10/07/2026, 16:48:14 UTC
Last updated: 10/08/2026, 05:48:07 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.