Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101604102424 | Publication Time | 2026-10-16 16:00:27 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-16 16:00:27 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco NX-OS Software NX-API Has Three Critical Security Vulnerabilities |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000026 The Cisco NX-OS Software development team discovered multiple security vulnerabilities during an internal security review and has completed the necessary patches. Currently, no evidence has been found indicating that these vulnerabilities are being actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly released the relevant vulnerability information and recommended remediation measures. CVE-2026-76453, CVSS: 8.8, Improper Handling Vulnerability. CVE-2026-76455, CVSS: 9.8, Improper Access Control Vulnerability. CVE-2026-76459, CVSS: 9.8, Out-of-Bounds Write Vulnerability. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] MDS 9000 Series Multilayer Switches Cisco NX-OS Software version 9.3 and earlier (inclusive), MDS 9000 Series Multilayer Switches Cisco NX-OS Software version 9.4, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.3 and earlier (inclusive), Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.4, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.5, Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.6, Nexus 7000 Series Switches Cisco NX-OS Software version 8.3 and earlier (inclusive), Nexus 7000 Series Switches Cisco NX-OS Software version 8.4, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.0 and earlier (inclusive), Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.1, Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.2, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software version 4.2 and earlier (inclusive), UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software version 4.3, UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software version 6.0 |
|||
| [Recommended Actions] Please update to the following versions: MDS 9000 Series Multilayer Switches Cisco NX-OS Software version 9.4(5a) or later (inclusive), Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.3(10) or later (inclusive), Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.4(8) or later (inclusive), Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.5(6) or later (inclusive), Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software version 10.6(4) or later (inclusive), Nexus 7000 Series Switches Cisco NX-OS Software version 8.4(14) or later (inclusive), Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.0(9h) or later (inclusive), Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.1(6g) or later (inclusive), Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software version 16.2(3g) or later (inclusive), UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode version 4.3(6j) or later (inclusive), UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode version 6.0(2e) or later (inclusive), UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode version 4.3(6.260049) or later (inclusive), UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode version 4.3(6.260059) or later (inclusive), UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode version 6.0(2.260080) or later (inclusive) |
|||
|
[Reference] |
|||