CVE-2026-76465

LOWCVSS 9.8 · CRITICAL

Signal is active with 5 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-590

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 5 mentions across 1 observed day

What's happening

  • 5 total mentions across 1 day

Deep dive

Activity timeline5 mentions / 1d
01345Mentions · 2026-10-07: 510-07
Referenced assets4 URLs
Full discourse5 posts
  • Daily CyberSecurity@Daily_CyberSec

    Four critical Cisco Nexus vulnerabilities, including CVE-2026-76485 and CVE-2026-76465 (CVSS 9.8), allow root RCE on NX-OS switches. Patch now. #Cisco #Nexus #NXOS #CVE202676485 #CVE202676465 #RCE #NetworkSecurity #Vulnerability https://securityonline.info/cisco-nexus-vulnerabilities-oam-rce/

    01141431
    13.0K followersView on X
  • Xavier Rivera@XavierRiveraX

    One crafted MPLS echo-request packet can hand an attacker root on Cisco Nexus 3000 and 9000 switches. No login, no click. CVE-2026-76465, CVSS 9.8, sits in the NX-OS MPLS OAM feature. The same packet can also crash processes and reload the switch. Core network gear, so check your Nexus fleet against Cisco advisory cisco-sa-moam-rce-uBTzYV7 today.

    0001067
    600 followersView on X
  • Kaitan ID Security@KaitanSecurity

    🚨 CRITICAL — CVE-2026-76465 Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-76465 #Cisco #CyberSecurity #InfoSec

    0000030
    89 followersView on X
  • The Circuitry@thecircuitry_

    CVE-2026-76465 scores 9.8 on Cisco Nexus 3000 and 9000 switches. Crafted MPLS echo-request packets can yield root code execution or device reloads. No authentication required. https://thecircuitry.to/article/critical-cve-2026-76465-allows-root-rce-on-cisco-nexus-switches-muydnb67 https://t.co/vyD8o2Eq8b

    0000029
    38 followersView on X
  • VulniPulse@vulnipulse

    CVE advisory (CRITICAL): CVE-2026-76465 - cisco: Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability. https://vulnipulse.com/advisories/cisco-cisco-sa-moam-rce-ubtzyv7 #CVE #CyberSecurity #Cisco #NXOS

    0000035
    7 followersView on X

Explore more