GoKawiilCisco discloses five critical NX-OS flaws affecting Nexus 3000/9000 switches
Cisco issued advisories for five critical vulnerabilities in NX-OS that could let attackers run code with root privileges or crash devices, triggering a denial-of-service. The flaws stem from input validation failures in the NX-API, Next Generation OAM, and MPLS OAM features, and affect Nexus 3000 and 9000 Series switches running in standalone NX-OS mode. Exploitation requires at least one of those features to be active, with some issues also depending on settings like SRv6 or NV Overlay being enabled.
GoKawiil's interpretation of the reporting above, not reported fact.
Because these features are not always enabled by default, the actual exposure may vary widely across deployments, but data center operators running affected configurations face a serious root-level compromise or outage risk. The reliance on specific feature combinations like SRv6 and NV Overlay suggests attackers would need some knowledge of a target's network setup, which could narrow but not eliminate real-world exploitation.
- Five critical NX-OS vulnerabilities could allow root-level code execution or denial-of-service on Nexus switches.
- Exploitation requires NX-API, NGOAM, or MPLS OAM features to be active, with some flaws needing SRv6 or NV Overlay enabled.
- Affected devices include Nexus 3000 and 9000 Series switches running in standalone NX-OS mode.
Source: bleepingcomputer.com, 2026-10-08
Published there as: “Cisco warns of critical flaws allowing Nexus switch takeover”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.