CVE-2026-20051

A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vulnerability is due to a logic error when processing a crafted Layer 2 ingress frame. An attacker could exploit this vulnerability by sending a stream of crafted Ethernet frames through the targeted device. A successful exploit could allow the attacker to cause a Layer 2 Virtual eXtensible LAN (VxLAN) traffic loop, which, in turn, could result in a denial of service (DoS) condition. This Layer 2 loop could oversubscribe the bandwidth on network interfaces, which would result in all data plane traffic being dropped. To exploit this vulnerability, the attacker must be Layer 2-adjacent to the affected device. Note: To stop active exploitation of this vulnerability, manual intervention is required to both stop the crafted traffic and flap all involved network interfaces. For additional assistance if a Layer 2 loop that is related to this vulnerability is suspected, contact the Cisco Technical Assistance Center (TAC) or the proper support provider. 

• CWE-457

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ether-dos-Kv8YNWZ4

Published

Feb 25, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20046A vulnerability in task group assignment for a specific CLI …8.8
• CVE-2026-20047A vulnerability in the web-based management interface of Cis…4.8
• CVE-2026-20048A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2026-20049A vulnerability in the processing of Galois/Counter Mode (GC…7.7
• CVE-2026-2005Heap buffer overflow in PostgreSQL pgcrypto allows a ciphert…8.8
• CVE-2026-20050A vulnerability in the Do Not Decrypt exclusion feature of t…6.8
• CVE-2026-20052A vulnerability in the memory management handling for the Sn…5.8
• CVE-2026-20053Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2026-20054Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2026-20055Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2026-20056A vulnerability in the Dynamic Vectoring and Streaming (DVS)…4
• CVE-2026-20057Multiple Cisco products are affected by a vulnerability in t…5.8