Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-20.
Metrics
CVSS 3.1 8.6/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco NX-OS Software | 8.2(5); 7.3(5)D1(1); 8.4(2); 8.4(3); 9.2(3); 8.2(1); 7.3(1)D1(1); 9.2(2v); 7.3(0)D1(1); 7.3(4)D1(1); 9.2(1); 9.2(2t); 9.2(3y); 9.3(2); 7.3(1)DY(1); 8.1(1); 8.2(2); 8.3(2); 7.3(2)D1(3a); 9.2(4) |
| Cisco | Cisco NX-OS System Software in ACI Mode | 15.2(1g); 15.2(2e); 15.2(2f); 15.2(2g); 15.2(2h); 15.2(3f); 15.2(3e); 15.2(3g); 15.2(4d); 15.2(4e); 15.2(5c); 15.2(5d); 16.0(1g); 15.2(5e); 15.2(4f); 15.2(6e); 15.2(6h); 16.0(1j); 15.2(6g); 15.2(7f) |
| Cisco | Cisco Unified Computing System (Managed) | 4.0(1a); 4.1(1a); 4.1(1b); 4.0(4h); 4.1(1c); 4.0(4e); 4.0(4g); 4.0(2e); 4.0(4a); 4.0(2d); 4.0(1b); 4.0(4f); 4.0(4c); 4.0(1c); 4.0(4b); 4.0(2b); 4.0(4d); 4.0(2a); 4.0(1d); 4.0(4i) |
References
Timeline
- Published
- Oct 7, 2026
- Last modified
- Nov 7, 2026
- NVD status
- Awaiting Analysis