CVE-2026-76485 is a critical stack-based buffer overflow vulnerability in the VXLAN OAM (NGOAM) feature of Cisco NX-OS Software. It allows an unauthenticated remote attacker to send crafted packets to an IP interface, potentially leading to arbitrary code execution with root privileges or causing a denial-of-service by crashing processes and reloading the device.
CVE-2026-76483 is a critical vulnerability in Cisco License On-Prem related to insufficiently protected credentials. The issue falls under CWE-522, indicating weak protection of credentials. Cisco identified these vulnerabilities during an internal security review and released software hardening updates to address them. The vulnerability has a high CVSS score of 9.1, reflecting its critical impact on confidentiality and integrity without requiring privileges or user interaction. Multiple specific versions of Cisco License On-Prem are affected. There is no indication of known exploits in the wild, and the product is not a cloud service.
CVE-2026-76482 is a critical vulnerability in Cisco License On-Prem related to improper verification of cryptographic signatures. It involves improper input verification issues classified under CWE-347. The vulnerability allows an attacker to fully compromise confidentiality, integrity, and availability without requiring privileges or user interaction. Multiple versions of Cisco License On-Prem are affected. There is no explicit patch information provided in the input data.
CVE-2026-76480 is a critical vulnerability in Cisco License On-Prem related to missing authentication for critical functions. It was identified during an internal security review by Cisco's engineering team and involves improper authentication issues classified under CWE-306. The vulnerability has a high CVSS score of 9.8, indicating it allows unauthenticated remote attackers to fully compromise confidentiality, integrity, and availability. Multiple specific versions of Cisco License On-Prem are affected. No explicit patch or remediation details are provided in the input data.
CVE-2026-76458 is a high-severity vulnerability in Cisco NX-OS Software involving improper handling of exceptional conditions. This issue is categorized under CWE-703 and was identified through Cisco's internal security review. The vulnerability can cause a denial of service (availability impact) without affecting confidentiality or integrity. No specific affected versions or patch information are provided in the available data.
CVE-2026-76459 is a critical vulnerability in Cisco NX-OS Software involving out-of-bounds write issues. These flaws were discovered during an internal security review by Cisco's engineering team and are categorized under CWE-787. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No specific affected versions or patch information are provided in the available data.
CVE-2026-76471 is a critical heap-based buffer overflow vulnerability in the NX-API feature of Cisco NX-OS Software. It allows an unauthenticated remote attacker to send crafted HTTP requests to the NX-API, potentially leading to arbitrary code execution with root privileges or denial of service via device reloads.
CVE-2026-76455 is a critical vulnerability in Cisco NX-OS Software involving improper access control. Cisco identified this issue during an internal security review and addressed it through a software hardening release. The vulnerability is classified under CWE-284, indicating weaknesses in access control mechanisms. It has a high CVSS score of 9.8, reflecting its potential impact on confidentiality, integrity, and availability without requiring user interaction or privileges. No specific affected versions or patch details are provided in the available data.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76457 are related to out-of-bounds read issues that are grouped under the Common Weakness Enumeration (CWE) CWE-125.
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
CVE-2026-76465 is a critical vulnerability in the MPLS OAM feature of Cisco NX-OS Software for Nexus 3000 and 9000 Series Switches. It allows an unauthenticated remote attacker to execute arbitrary code with root privileges or cause a denial of service by sending a crafted MPLS echo-request packet. The flaw arises from improper validation of these packets, potentially leading to process crashes and device reloads.
Cisco Jabber for Android versions before 15.3.1.311364 contain a path traversal vulnerability that allows a malicious app without permissions to write files into Jabber's private data directories. This is achieved by exploiting an exported activity and unsanitized input used in file path construction, enabling attackers to place attacker-controlled content in sensitive directories without user interaction.
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application.
This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.