Vulnerability · Published Oct 7, 2026 · Assigned by cisco
CVE-2026-76456Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
High 8.6
In plain English
A high-severity improper input validation in Cisco NX-OS Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Official description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco NX-OS Software | 8.2(5)7.3(5)D1(1)8.4(2)8.4(3)9.2(3)8.2(1)7.3(1)D1(1)9.2(2v) |
| Cisco | Cisco NX-OS System Software in ACI Mode | 15.2(1g)15.2(2e)15.2(2f)15.2(2g)15.2(2h)15.2(3f)15.2(3e)15.2(3g) |
| Cisco | Cisco Unified Computing System (Managed) | 4.0(1a)4.1(1a)4.1(1b)4.0(4h)4.1(1c)4.0(4e)4.0(4g)4.0(2e) |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H