Reported by 7 outlets

Timeline

1. original reporting

   Cisco Patches a Dozen Critical Vulnerabilities

   securityweek.com · 5d ago · October 8th, 2026

   Cisco on Wednesday announced patches for 35 vulnerabilities across its products, including over a dozen critical-severity bugs. A fresh Meraki security hardening release fixes multiple bugs grouped together under seven CVEs, based on the underlying weakness type. The most severe of these is CVE-2026-76464, which covers memory issues such as buffer overflows and out-of-bounds writes. Cisco also resolved eight bugs in License On-Prem, including five critical-severity issues. Two of them could lead to unauthorized access (CVE-2026-20328) and DoS conditions (CVE-2026-76454), and could be exploited without authentication. The remaining three CVEs, CVE-2026-76482, CVE-2026-76480, and CVE-2026-76483, cover multiple security holes across missing authentication, improper verification of cryptographic signature, and insufficiently protected credentials. NX-OS received fixes for 14 vulnerabilities, including seven critical-severity issues. Multiple improper access control and out-of-bounds write flaws have been grouped together under two CVEs: CVE-2026-76455 and CVE-2026-76459. Two other bugs, CVE-2026-76471 and CVE-2026-76465, could allow remote, unauthenticated attackers to execute arbitrary code with root privileges or cause a DoS condition. The remaining three issues, CVE-2026-76485, CVE-2026-76486, and CVE-2026-76501, can only be triggered on Nexus 3000 and Nexus 9000 series switches that have Next Generation OAM (NGOAM) enabled. Cisco als

2. update from sec.cloudapps.cisco.com

   Cisco Security Advisory: Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities

   sec.cloudapps.cisco.com · 6d ago · October 7th, 2026

   Cisco published advisory cisco-sa-ngoam-rce-LWKQ4BU on October 7, 2026 describing multiple vulnerabilities in the NGOAM feature of NX-OS Software. Unauthenticated remote attackers can execute arbitrary code with root privileges or cause denial of service by sending crafted packets to an affected device. There are no workarounds; software updates have been released.

3. update from threataft.com

   Cisco 7 CVEs — NX-OS NGOAM RCE & License On-Prem | ThreatAft

   threataft.com · 6d ago · October 8th, 2026

   ThreatAft's October 2026 mega-roundup, published October 8 at 00:00 UTC, covers three CVSS 9.8 NX-OS NGOAM RCE vulnerabilities (CVE-2026-76485, CVE-2026-76486, CVE-2026-76501) plus additional critical CVEs including a CVSS 10 license on-prem signature bypass. The post notes 18 total CVEs and urges immediate patching with no workarounds available.

4. mentioned by radar.offseq.com

   CVE-2026-76485: CRITICAL (CVSS 9.8) vulnerability in Cisco NX-OS NGOAM allows remote code execution or DoS via crafted packets. Disable NGOA

   radar.offseq.com · 6d ago · October 8th, 2026

5. mentioned by threataft.com

   Cisco October advisory: 18 CVEs, 7 critical, no workarounds for any of them. NX-OS NGOAM: CVE-2026-76485/76486/76501 — all CVSS 9.8, unauthe

   threataft.com · 6d ago · October 8th, 2026

6. update from gbhackers.com

   Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root

   gbhackers.com · 5d ago · October 8th, 2026

   Successful exploitation could crash processes, trigger device reloads, and cause denial of service, disrupting network availability.

7. update from malware.news

   Cisco security advisory (AV26-1020)

   malware.news · 5d ago · October 8th, 2026

   Serial number: AV26-1020 Date: October 8, 2026 As of October 7, 2026, Cisco is affected by vulnerabilities in the following products: Cisco Nexus 3000 Series Switches Multiple versions and models Cisco Nexus 9000 Series Switches Multiple versions and models UCS 6300 Series Fabric Interconnect Prior to 4.3(6.260049) Meraki Campus Gateways Prior to 32.2.5 (late Oct 2026) Prior to 33.1.4 (mid-Nov 2026) Meraki MG Cellular Gateways Prior to 26.1.4 Meraki MR Wireless Access Points Multiple versions Meraki MS Series Switches Multiple Versions Meraki MV Smart Cameras Prior to 8.0 Meraki MX Security and SD-WAN Appliances Multiples versions Cisco License On-Prem Release Prior to 10-202609 Cisco NX-OS Software Release Multiples versions Cisco UCS Software Release Prior to 4.3(6.260049) Prior to 4.3(6.260059) Prior to 6.0(2.260080) Cisco Application Policy Infrastructure Controller (APIC) Prior to 6.0(9h) Prior to 6.1(6g) Prior to 6.2(3g) Cisco Finesse Release Prior to 15.0(1) SU3 (Feb 2027) Cisco Packaged CCE and Unified CCE Release Prior to 15.0(1)ES202701 (Jan 2027) Cisco Unified CCX Release Prior to 15.0(1) SU2 (Feb 2027) The Cyber Centre encourages users and administrators to review the provided web link and

8. update from bleepingcomputer.com

   Cisco warns of critical flaws allowing Nexus switch takeover

   bleepingcomputer.com · 5d ago · October 8th, 2026

   If remote code execution cannot be achieved, an attacker could exploit the vulnerabilities to crash processes and force the vulnerable device to reload, resulting in a denial-of-service condition. However, successful exploitation depends on the NX-API, Next Generation OAM (NGOAM), and MPLS OAM features being active. All five vulnerabilities are rooted in a validation failure and require at least one of the three features to be active on the affected device: Leveraging the CVE-2026-76486 flaw also requires either Segment Routing over IPv6 (SRv6) or Network Virtualization (NV) Overlay to be enabled. "NV Overlay also requires a VXLAN Ethernet VPN (EVPN) VXLAN Network Identifier (VNI) mapped to a Network Virtualization Endpoint (NVE) interface with at least one peer VXLAN Tunnel Endpoint (VTEP) learned (for example, BGP EVPN or an ingress-replication static peer)," reads Cisco's advisory . CVE-2026-76501 is exploitable if SRv6, which is supported only on some Nexus 9000 models, is turned on. In the case of CVE-2026-76465, MPLS OAM must be explicitly activated, as it is

9. update from sec.cloudapps.cisco.com

   Two more Cisco advisories today addressing critical vulnerabilities: - CVE-2026-76471: Cisco NX-OS Software NX-API Remote Code Execution Vul

   sec.cloudapps.cisco.com · 5d ago · October 8th, 2026

   Two more Cisco advisories today addressing critical vulnerabilities: - CVE-2026-76471: Cisco NX-OS Software NX-API Remote Code Execution Vul

   via Mastodon https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j

10. update from malware.news

    Cisco security advisory (AV26-1020): October 2026 batch spans Nexus, UCS, Meraki, APIC and contact-center products

    malware.news · 5d ago · October 8th, 2026

    Cisco security advisory AV26-1020, relayed by the Canadian Centre for Cyber Security: a Cisco security bulletin is rarely trivial, since Cisco network equipment is deployed everywhere.

11. mentioned by www.bleepingcomputer.com

    🤖 Cisco released advisories for 5 critical NX-OS flaws allowing RCE with root privileges on Nexus 3000/9000 switches (NX-API, NGOAM, MPLS OA

    www.bleepingcomputer.com · 5d ago · October 8th, 2026

12. update from www.bleepingcomputer.com

    🤖 Cisco NX-OS: 5 critical RCE flaws in Nexus 3000/9000 switches (standalone mode). Crafted HTTP/packets to NX-API, NGOAM or MPLS OAM → root

    www.bleepingcomputer.com · 5d ago · October 9th, 2026

    Crafted HTTP/packets to NX-API, NGOAM or MPLS OAM → root

    via Mastodon https://www.bleepingcomputer.com/news/security/cisco-warns-of-critical-flaws-allowing-nexus-switch-takeover/

13. mentioned by www.bleepingcomputer.com

    # Cisco warns of critical flaws allowing # Nexus switch takeover https://www. bleepingcomputer.com/news/secu rity/cisco-warns-of-critical-fl

    www.bleepingcomputer.com · 4d ago · October 9th, 2026