Cisco Nexus und Cisco NX-OS: Mehrere Schwachstellen
WID-SEC-2026-3810 · first 08.10.2026 · updated 08.10.2026 · CVSS 9,8
What it is about
Bei der Cisco Nexus Serie handelt es sich um modulare Switching-Systeme der Data Center-Klasse. Cisco NX-OS ist ein Data Center Netzwerk-Betriebssystem für virtualisierte Rechenzentren. NX-OS wurde für Ethernet Switches der Nexus Serie und Fibre Channel Storage Area Network Swiches der MDS Serie entwickelt. Ein Angreifer kann mehrere Schwachstellen in Cisco Nexus und Cisco NX-OS ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.
Under what conditions?
The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Code auszuführen
- erweiterte Berechtigungen zu erlangen
- Sicherheitsmaßnahmen zu umgehen
- Daten offenzulegen und zu manipulieren oder Denial-of-Service-Zustände herbeizuführen
Am I affected?
Affected according to the BSI:
- Cisco Nexus 3000 Series Switches
- Cisco Nexus 9000 Series Switches
- Cisco NX-OS Nexus 9000 Series Switches <10.6(4)
- Cisco NX-OS Nexus 9000 Series Switches <10.5(6)
- Cisco NX-OS Nexus 9000 Series Switches <10.4(8)
- Cisco NX-OS Nexus 9000 Series Switches <10.3(10)
- Cisco NX-OS Nexus 3000 Series Switches <10.6(4)
- Cisco NX-OS Nexus 3000 Series Switches <10.5(6)
- Cisco NX-OS Nexus 3000 Series Switches <10.4(8)
- Cisco NX-OS Nexus 3000 Series Switches <10.3(10)
- Cisco NX-OS MDS 9000 Series Multilayer Switches <9.4(5a)
- Cisco NX-OS Nexus 9000 Series Fabric Switches <16.0(9h)
and 19 more
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Cisco NX-OS Nexus 9000 Series Switches 10.6(4)
- Cisco NX-OS Nexus 9000 Series Switches 10.5(6)
- Cisco NX-OS Nexus 9000 Series Switches 10.4(8)
- Cisco NX-OS Nexus 9000 Series Switches 10.3(10)
- Cisco NX-OS Nexus 3000 Series Switches 10.6(4)
- Cisco NX-OS Nexus 3000 Series Switches 10.5(6)
- Cisco NX-OS Nexus 3000 Series Switches 10.4(8)
- Cisco NX-OS Nexus 3000 Series Switches 10.3(10)
- Cisco NX-OS MDS 9000 Series Multilayer Switches 9.4(5a)
- Cisco NX-OS Nexus 9000 Series Fabric Switches 16.0(9h)
- Cisco NX-OS Nexus 9000 Series Fabric Switches 16.1(6g)
- Cisco NX-OS Nexus 9000 Series Fabric Switches 16.2(3g)
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Cisco Security Advisory cisco-sa-aci-epgcbp-SfDU7NLf vom 2026-10-07 sec.cloudapps.cisco.com
- Cisco Security Advisory cisco-sa-hardening-nxosw1-cWzSbtR vom 2026-10-07 sec.cloudapps.cisco.com
- Cisco Security Advisory cisco-sa-moam-rce-uBTzYV7 vom 2026-10-07 sec.cloudapps.cisco.com
- Cisco Security Advisory cisco-sa-napi-rce-r2shwu2j vom 2026-10-07 sec.cloudapps.cisco.com
- Cisco Security Advisory cisco-sa-ngoam-rce-LWKQ4BU vom 2026-10-07 sec.cloudapps.cisco.com
- Cisco Security Advisory cisco-sa-nxos-mppe-dhKZAFgb vom 2026-10-07 sec.cloudapps.cisco.com
- Cisco Security Advisory cisco-sa-nxos-nscpdos-SnderkC7 vom 2026-10-07 sec.cloudapps.cisco.com
CVE: CVE-2026-20038, CVE-2026-76465, CVE-2026-76485, CVE-2026-76486, CVE-2026-76501, CVE-2026-76453, CVE-2026-76455, CVE-2026-76456, CVE-2026-76457, CVE-2026-76458, CVE-2026-76459, CVE-2026-76471, CVE-2026-20032, CVE-2026-20173
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.