Cisco NX-API Carries an Unauthenticated Root RCE, and It Stays Off Until Automation Turns It On
Photo: Pixabay (illustration)
CVE-2026-76471 allows an unauthenticated, remote attacker to send a crafted HTTP request to the NX-API of an affected device to execute arbitrary code with root privileges, provided the feature is enabled. The bug, detailed in the official Cisco advisory published October 7, is a heap buffer overflow (CWE-122) carrying a CVSS base score of 9.8. It is tracked as CSCwu46199 for the Nexus 3000 and 9000 lines and CSCwu58579 for UCS 6300. The same bug can trigger process crashes that force a device reload and a denial of service.
Source: Forkast
