CVE-2026-76456
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A vulnerability in Cisco NX-OS discovered during security review concerns improper input validation of special elements in a command (CWE-20). It is addressed in a software hardening release.
Risk Assessment
Improper validation in commands may allow an attacker to inject malicious commands or data, potentially leading to privilege escalation or system compromise.
Recommendation
Upgrade Cisco NX-OS to the latest patched version. Restrict CLI access and apply access control policies.
Other vulnerabilities in Cisco NX-OS
See all- CVE-2016-1455High
Cisco NX-OS versions before 7.0(3)I2(2e) and 7.0(3)I4 before 7.0(3)I4(1) have an incorrect iptables local-interface configuration, allowing remote attackers to obtain sensitive information via TCP or UDP traffic.
- CVE-2015-4234High
Cisco NX-OS versions 6.0(2) and 6.2(2) on Nexus devices has an improper OS configuration, allowing local users to obtain root access via unspecified input to the Python interpreter.
- CVE-2015-0658High
The DHCP implementation in the PowerOn Auto Provisioning (POAP) feature in Cisco NX-OS does not properly restrict the initialization process, allowing remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network.
- CVE-2026-76459Critical
A vulnerability in Cisco NX-OS discovered during internal security review concerns out-of-bounds write (CWE-787). It is fixed in a software hardening release.
- CVE-2024-20399MediumActively exploited
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user with Administrator credentials to execute arbitrary commands as root on the underlying operating system. This is due to insufficient validation of arguments passed to specific configuration CLI commands.
- CVE-2026-76458High
A vulnerability in Cisco NX-OS found during security review concerns improper handling of exceptional conditions (CWE-703). It is addressed in a software hardening release.
- CVE-2026-76457High
A vulnerability in Cisco NX-OS discovered during internal security review concerns out-of-bounds read (CWE-125). It is fixed in a software hardening release.
- CVE-2026-76453High
A vulnerability in Cisco NX-OS discovered during internal security review concerns improper neutralization (CWE-707). It is fixed in a software hardening release.
Original NVD description (English source)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS