CVE-2026-20212

CriticalCVSS 9.8/10Last modified Sep 3, 2026

Description

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1327

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
CiscoCisco NX-OS Software10.3(1); 10.3(2); 10.3(3); 10.4(1); 10.3(99w); 10.3(3w); 10.3(99x); 10.3(3o); 10.3(4); 10.3(3p); 10.3(4a); 10.4(2); 10.3(3q); 10.3(5); 10.4(3); 10.3(3x); 10.3(4g); 10.5(1); 10.3(3r); 10.3(6)

References

Timeline

Published
Sep 2, 2026
Last modified
Sep 3, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-202137.5A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possiblyCVE-2026-202147.5A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possiblCVE-2026-202157.5A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possiblyCVE-2026-202167.5A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition oCVE-2026-202177.5A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possCVE-2026-202185.8A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthentiCVE-2026-202195.4A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of othCVE-2026-20224.3The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'rednao_smart_forCVE-2026-202206.3A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attackCVE-2026-202215.8Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the SnortCVE-2026-202227.4A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall ThCVE-2026-2022310.0A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker
CVE-2026-20212: Critical severity, CVSS 9.8 | Vulnix