{"id":"CVE-2026-76471","revision":"22ac7d9a219545cbb1a6bd8514991983","records":[{"revision":"22ac7d9a219545cbb1a6bd8514991983","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-76471","aliases":[],"title":"Cisco NX-OS Software NX-API Remote Code Execution Vulnerability","description":"A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. \r\n\r\nThe vulnerability is due to insufficient input validation of data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a reload of the device and a DoS condition.","state":0,"publishedAt":"2026-10-07T16:15:35.076+00:00","modifiedAt":"2026-10-08T03:55:32.792+00:00","affected":[{"ecosystem":"Vendor product","name":"Cisco NX-OS Software","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco NX-OS Software\",\n                    \"versions\": [\n                        {\n                            \"version\": \"9.2(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.2(2v)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.2(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.2(2t)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.2(3y)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.2(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(1z)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.2(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(6)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(5w)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(7)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(7k)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(7a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(8)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(9)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(10)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(11)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(12)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(99w)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3w)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(99x)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3o)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3p)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3q)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(13)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3x)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(3r)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(6)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(14)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(4h)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(7)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(15)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(4g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(4)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(1)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3t)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(8)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(6)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3o)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(16)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(1s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(2)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(3p)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.3(9)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(2s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(3)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.4(7)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.5(5)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"9.3(17)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(2n)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"10.6(3s)\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"},{"ecosystem":"Vendor product","name":"Cisco Unified Computing System (Managed)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Cisco\",\n                    \"product\": \"Cisco Unified Computing System (Managed)\",\n                    \"versions\": [\n                        {\n                            \"version\": \"4.0(1a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(1d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4f)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4h)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(1c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(2a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(1e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(2a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(2b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(1b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(2e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(1a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(1c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(1d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4i)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(2d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(1b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(2b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4k)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(2c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4l)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(4a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4m)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1f)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3f)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1i)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3h)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1k)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1l)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4n)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1m)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3i)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(2a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(1n)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3j)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(2c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(2d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3k)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.0(4o)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(2e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3l)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(2b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3h)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3i)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(2c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3m)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(2e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(3a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3j)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(3c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(4a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3k)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(4b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(4c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3l)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(4d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(2f)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3m)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(5a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(4e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.1(3n)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(4f)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3n)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(5c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3o)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(5d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6a)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6b)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(5e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6c)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3p)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6d)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6e)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6f)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3r)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6g)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6h)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.2(3s)\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"4.3(6i)\",\n                            \"status\": \"affected\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unknown\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-76471","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-76471","identifiers":["CVE-2026-76471"]},"retained":false,"historicalAffected":[]}],"coverage":[]}