Cisco Nx-os Software (Cisco) - vulnerabilities (CVEs)

102 CVEs, 13 in the last 30 days, 472 known versions, newest CVE from 2026-10-07. Vendor: Cisco.

CVEs of Cisco Nx-os Software

CVE-2026-76501 - CVSS 9.8 (critical), 2026-10-07: A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM,…
CVE-2026-76486 - CVSS 9.8 (critical), 2026-10-07: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated,…
CVE-2026-76485 - CVSS 9.8 (critical), 2026-10-07: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated,…
CVE-2026-76458 - CVSS 8.6 (high), 2026-10-07: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal…
CVE-2026-76459 - CVSS 9.8 (critical), 2026-10-07: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal…
CVE-2026-76471 - CVSS 9.8 (critical), 2026-10-07: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges…
CVE-2026-76455 - CVSS 9.8 (critical), 2026-10-07: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal…
CVE-2026-76457 - CVSS 8.6 (high), 2026-10-07: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal…
CVE-2026-76456 - CVSS 8.6 (high), 2026-10-07: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal…
CVE-2026-76465 - CVSS 9.8 (critical), 2026-10-07: A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco…
CVE-2026-76453 - CVSS 8.8 (high), 2026-10-07: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal…
CVE-2026-20173 - CVSS 5.8 (medium), 2026-10-07: A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS)…
CVE-2026-20032 - CVSS 4.4 (medium), 2026-10-07: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python…
CVE-2026-20212 - CVSS 9.8 (critical), 2026-09-02: A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code…
CVE-2026-20171 - CVSS 6.8 (medium), 2026-05-20: A vulnerability in the Border Gateway Protocol (BGP) enforce-first-as feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series…
CVE-2026-20051 - CVSS 7.4 (high), 2026-02-25: A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching…
CVE-2026-20010 - CVSS 7.4 (high), 2026-02-25: A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the…
CVE-2025-20292 - CVSS 4.4 (medium), 2025-08-27: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying…
CVE-2025-20290 - CVSS 5.5 (medium), 2025-08-27: A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS…
CVE-2025-20241 - CVSS 7.4 (high), 2025-08-27: A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus…
CVE-2025-20262 - CVSS 5 (medium), 2025-08-27: A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in…
CVE-2025-20191 - CVSS 7.4 (high), 2025-05-07: A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN…
CVE-2025-20161 - CVSS 5.1 (medium), 2025-02-26: A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow…
CVE-2025-20111 - CVSS 7.4 (high), 2025-02-26: A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could…
CVE-2024-20397 - CVSS 5.2 (medium), 2024-12-04: A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an…
CVE-2024-20411 - CVSS 6.7 (medium), 2024-08-28: A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to execute arbitrary code…
CVE-2024-20289 - CVSS 4.4 (medium), 2024-08-28: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execute arbitrary commands on the…
CVE-2024-20446 - CVSS 8.6 (high), 2024-08-28: A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2024-20413 - CVSS 6.7 (medium), 2024-08-28: A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to…
CVE-2024-20286 - CVSS 8.8 (high), 2024-08-28: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox…
CVE-2024-20285 - CVSS 8.8 (high), 2024-08-28: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox…
CVE-2024-20284 - CVSS 8.8 (high), 2024-08-28: A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox…
CVE-2024-20399 - CVSS 6.7 (medium), 2024-07-01: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands…
CVE-2024-20321 - CVSS 8.6 (high), 2024-02-29: A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause…
CVE-2024-20294 - CVSS 6.6 (medium), 2024-02-29: A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent…
CVE-2024-20291 - CVSS 5.8 (medium), 2024-02-29: A vulnerability in the access control list (ACL) programming for port channel subinterfaces of Cisco Nexus 3000 and 9000 Series Switches in standalone NX-OS…
CVE-2024-20267 - CVSS 8.6 (high), 2024-02-29: A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to…
CVE-2023-20115 - CVSS 5.4 (medium), 2023-08-23: A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an…
CVE-2023-20169 - CVSS 7.4 (high), 2023-08-23: A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco…
CVE-2023-20168 - CVSS 7.1 (high), 2023-08-23: A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected…
CVE-2023-20050 - CVSS 7.8 (high), 2023-02-23: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2022-20824 - CVSS 8.8 (high), 2022-08-25: A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2022-20823 - CVSS 8.6 (high), 2022-08-25: A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2022-20623 - CVSS 8.6 (high), 2022-02-23: A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could…
CVE-2022-20650 - CVSS 8.8 (high), 2022-02-23: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root…
CVE-2022-20625 - CVSS 4.3 (medium), 2022-02-23: A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to…
CVE-2022-20624 - CVSS 8.6 (high), 2022-02-23: A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a…
CVE-2021-1588 - CVSS 8.6 (high), 2021-08-25: A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker…
CVE-2021-1587 - CVSS 8.6 (high), 2021-08-25: A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated,…
CVE-2021-1591 - CVSS 5.8 (medium), 2021-08-25: A vulnerability in the EtherChannel port subscription logic of Cisco Nexus 9500 Series Switches could allow an unauthenticated, remote attacker to bypass…
CVE-2021-1590 - CVSS 5.3 (medium), 2021-08-25: A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause…
CVE-2021-1368 - CVSS 8.8 (high), 2021-02-24: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent…
CVE-2021-1367 - CVSS 4.3 (medium), 2021-02-24: A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a…
CVE-2021-1361 - CVSS 9.8 (critical), 2021-02-24: A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in…
CVE-2021-1387 - CVSS 8.6 (high), 2021-02-24: A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2021-1229 - CVSS 5.8 (medium), 2021-02-24: A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory…
CVE-2021-1227 - CVSS 8.1 (high), 2021-02-24: A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…
CVE-2020-3398 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2020-3397 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Border Gateway Protocol (BGP) Multicast VPN (MVPN) implementation of Cisco NX-OS Software could allow an unauthenticated, remote…
CVE-2020-3517 - CVSS 8.6 (high), 2020-08-27: A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated attacker to cause…
CVE-2020-3394 - CVSS 7.8 (high), 2020-08-27: A vulnerability in the Enable Secret feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an…
CVE-2020-3415 - CVSS 8.8 (high), 2020-08-27: A vulnerability in the Data Management Engine (DME) of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with…
CVE-2020-3168 - CVSS 7.5 (high), 2020-02-26: A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to…
CVE-2020-3165 - CVSS 8.2 (high), 2020-02-26: A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an…
CVE-2019-1734 - CVSS 5.5 (medium), 2019-11-05: A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker…
CVE-2019-1969 - CVSS 5.8 (medium), 2019-08-30: A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow…
CVE-2019-1967 - CVSS 8.6 (high), 2019-08-30: A vulnerability in the Network Time Protocol (NTP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of…
CVE-2019-1965 - CVSS 7.7 (high), 2019-08-28: A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to…
CVE-2019-1780 - CVSS 6.7 (medium), 2019-05-16: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to…
CVE-2019-1768 - CVSS 6.7 (medium), 2019-05-16: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator…
CVE-2019-1812 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1808 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1811 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1810 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature used in an NX-OS CLI command in Cisco Nexus 3000 Series and 9000 Series Switches could allow an…
CVE-2019-1813 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1809 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level…
CVE-2019-1795 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1791 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1774 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2019-1778 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux…
CVE-2019-1782 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1790 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with valid administrator credentials to execute arbitrary…
CVE-2019-1776 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux…
CVE-2019-1781 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1784 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux…
CVE-2019-1775 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating…
CVE-2019-1779 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the…
CVE-2019-1783 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1770 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1769 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands…
CVE-2019-1735 - CVSS 7.8 (high), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the…
CVE-2019-1767 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator…
CVE-2019-1728 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local…
CVE-2019-1731 - CVSS 5.1 (medium), 2019-05-15: A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private…
CVE-2019-1727 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue…
CVE-2019-1730 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of…
CVE-2019-1733 - CVSS 5.4 (medium), 2019-05-15: A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site…
CVE-2019-1726 - CVSS 7.8 (high), 2019-05-15: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an…
CVE-2019-1729 - CVSS 6.7 (medium), 2019-05-15: A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local…
CVE-2019-1732 - CVSS 6.4 (medium), 2019-05-15: A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator…