{"id":"CVE-2026-76465","revision":"da428357385144c39154f120f5b279b2","records":[{"revision":"da428357385144c39154f120f5b279b2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-76465","aliases":[],"title":"Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability","description":"A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.\r\n\r\nThis vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.","state":0,"publishedAt":"2026-10-07T16:14:26.107+00:00","modifiedAt":"2026-10-08T03:55:35.639+00:00","affected":[{"ecosystem":"Vendor product","name":"Cisco NX-OS Software","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco NX-OS Software\",\n                    \"versions\": [\n                        {\n                            \"version\": \"9.3(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(1z)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(6)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(5w)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(7)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(7k)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(7a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(8)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(9)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(10)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(11)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(12)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(99w)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3w)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(99x)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3o)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3p)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3q)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(13)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3x)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3r)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(6)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(14)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4h)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(7)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(15)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(4g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3t)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(8)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(6)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3o)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(16)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(1s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3p)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(9)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(2s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(7)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(17)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(2n)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(3s)\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-moam-rce-uBTzYV7"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76465","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-76465","identifiers":["CVE-2026-76465"]},"retained":false,"historicalAffected":[]}],"coverage":[]}