CVE-2026-76453

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

Severity
High 8.8
CVSS 3.1
Remote, needs privileges or user interaction what this means
Exploited
Not listed
EPSS
—
Discovered by
Vendor
Vendor-published field
Published
Oct 7, 2026
Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76453 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Weakness: CWE-707

Affected products

Vendor Product Category Matched by
Cisco Cisco NX-OS Software Routing & Switching cna-assigner
Cisco Cisco Unified Computing System (UCS) Other Products cna-assigner
Vendor-reported products (3)
  • Cisco · Cisco NX-OS Software
  • Cisco · Cisco NX-OS System Software in ACI Mode
  • Cisco · Cisco Unified Computing System (Managed)

Vendor advisory

cisco-sa-hardening-nxosw1-cWzSbtR

Cisco NX-OS Software Security Hardening Release: October 2026

Cisco’s rating: Critical (advisory CVSS 9.8) · Published Oct 7, 2026

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?