CVE-2026-76459

CriticalCVSS 9.8/10Last modified Oct 9, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76459 are related to out-of-bounds write issues that are grouped under the Common Weakness Enumeration (CWE) CWE-787.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published: Oct 7, 2026
Last modified: Oct 9, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-76466.5IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded docum CVE-2026-7646010.0A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. CVE-2026-764619.8A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacke CVE-2026-764625.5A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an CVE-2026-764638.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764649.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764659.8A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Swi CVE-2026-764669.8A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network acce CVE-2026-764677.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764688.2As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764697.4As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-76478.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due t