CVE-2026-76459
CRITICALCVSS 9.8/10EPSS 0.28%
Last modified
CVE-2026-76459 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76459 are related to out-of-bounds write issues that are grouped under the Common Weakness Enumeration (CWE) CWE-787.. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76459 are related to out-of-bounds write issues that are grouped under the Common Weakness Enumeration (CWE) CWE-787.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco NX-OS Software | 8.2(5); 7.3(5)D1(1); 8.4(2); 8.4(3); 9.2(3); 8.2(1); 7.3(1)D1(1); 9.2(2v); 7.3(0)D1(1); 7.3(4)D1(1); 9.2(1); 9.2(2t); 9.2(3y); 9.3(2); 7.3(1)DY(1); 8.1(1); 8.2(2); 8.3(2); 7.3(2)D1(3a); 9.2(4); 8.1(2); 7.3(3)D1(1); 8.2(3); 8.3(1); 8.4(1); 8.1(1b); 7.3(0)DX(1); 7.3(2)D1(1); 9.3(1); 7.3(2)D1(2); 8.2(4); 7.3(0)DY(1); 9.3(1z); 9.2(2); 8.1(2a); 7.3(2)D1(3); 8.1(1a); 8.4(1a); 9.3(3); 7.3(2)D1(1d); 9.3(4); 7.3(6)D1(1); 8.2(6); 9.3(5); 8.4(2a); 8.4(2b); 8.5(1); 9.3(6); 8.4(4); 7.3(7)D1(1); 8.4(2c); 9.3(5w); 8.2(7); 9.3(7); 9.3(7k); 7.3(8)D1(1); 9.3(7a); 8.2(7a); 9.3(8); 8.4(4a); 8.4(2d); 8.4(5); 8.2(8); 9.3(9); 7.3(9)D1(1); 8.4(6); 8.4(2e); 9.3(10); 9.2(1a); 8.2(9); 10.3(1); 8.4(7); 10.3(2); 8.4(6a); 9.3(11); 10.3(3); 9.4(1); 9.3(2a); 8.4(2f); 8.2(10); 9.3(12); 10.4(1); 8.4(8); 10.3(99w); 10.3(3w); 10.3(99x); 10.3(3o); 8.4(9); 10.3(4); 10.3(3p); 10.3(4a); 9.4(1a); 10.4(2); 10.3(3q); 9.3(13); 8.2(11); 9.4(2); 10.3(5); 10.4(3); 10.3(3x); 10.3(4g); 10.5(1); 8.4(10); 9.4(2a); 10.3(3r); 10.3(6); 9.3(14); 10.4(4); 10.3(4h); 10.5(2); 10.5(1j); 8.4(11); 9.4(3); 10.3(7); 10.4(5); 10.5(3); 9.3(15); 9.4(3a); 10.4(4g); 10.5(4); 9.4(3b); 8.4(12); 10.6(1); 10.5(3t); 10.3(8); 10.4(6); 10.5(3s); 10.5(3e); 9.4(4); 10.5(3o); 9.3(16); 10.6(1s); 10.6(2); 10.5(3p); 9.4(5); 10.3(9); 10.6(2s); 8.4(13); 10.6(3); 10.4(7); 10.5(5); 9.3(17); 10.6(2n); 10.6(3q); 10.6(3o); 10.6(3s) |
| Cisco | Cisco NX-OS System Software in ACI Mode | 15.2(1g); 15.2(2e); 15.2(2f); 15.2(2g); 15.2(2h); 15.2(3f); 15.2(3e); 15.2(3g); 15.2(4d); 15.2(4e); 15.2(5c); 15.2(5d); 16.0(1g); 15.2(5e); 15.2(4f); 15.2(6e); 15.2(6h); 16.0(1j); 15.2(6g); 15.2(7f); 15.2(7g); 16.0(2h); 15.2(8d); 16.0(2j); 15.2(8e); 16.0(3d); 16.0(3e); 15.2(8f); 15.2(8g); 15.3(1d); 15.2(8h); 16.0(4c); 15.3(2a); 15.2(8i); 16.0(5h); 15.3(2b); 16.0(3g); 16.0(5j); 15.3(2c); 16.0(6c); 15.3(2d); 16.1(1f); 16.0(7e); 16.0(8e); 15.3(2e); 16.0(8f); 16.1(2f); 16.1(2g); 15.3(2f); 16.0(9c); 16.1(3f); 16.0(9d); 16.0(6h); 16.0(8h); 16.1(3g); 16.0(9e); 16.1(4h); 16.1(5e); 16.2(1g); 16.0(9f); 16.2(2e) |
| Cisco | Cisco Unified Computing System (Managed) | 4.0(1a); 4.1(1d); 4.0(4f); 4.0(4c); 4.0(2b); 4.1(2a); 4.0(4a); 4.0(4e); 4.0(4h); 4.0(2a); 4.1(1c); 4.0(1b); 4.1(1e); 4.0(4d); 4.0(4b); 4.0(2e); 4.1(1a); 4.0(4g); 4.0(1d); 4.0(1c); 4.0(4i); 4.0(2d); 4.1(1b); 4.1(2b); 4.0(4k); 4.1(3a); 4.1(3b); 4.1(2c); 4.0(4l); 4.1(4a); 4.1(3c); 4.1(3d); 4.2(1c); 4.2(1d); 4.0(4m); 4.1(3e); 4.2(1f); 4.1(3f); 4.2(1i); 4.1(3h); 4.2(1k); 4.2(1l); 4.0(4n); 4.2(1m); 4.1(3i); 4.2(2a); 4.2(1n); 4.1(3j); 4.2(2c); 4.2(2d); 4.2(3b); 4.1(3k); 4.0(4o); 4.2(2e); 4.2(3d); 4.2(3e); 4.2(3g); 4.1(3l); 4.3(2b); 4.2(3h); 4.2(3i); 4.3(2c); 4.1(3m); 4.3(2e); 4.3(3a); 4.2(3j); 4.3(3c); 4.3(4a); 4.2(3k); 4.3(4b); 4.3(4c); 4.2(3l); 4.3(4d); 4.3(2f); 4.2(3m); 4.3(5a); 4.3(4e); 4.1(3n); 4.3(4f); 4.2(3n); 4.3(5c); 4.2(3o); 4.3(5d); 4.3(6a); 4.3(6b); 4.3(5e); 4.3(6c); 4.2(3p); 6.0(1b); 6.0(1c); 4.3(6d); 6.0(1d); 6.0(1e); 4.3(6e); 6.0(1f); 4.3(6f); 6.0(2b); 6.0(1h); 4.2(3r); 6.0(2c); 4.3(6g); 6.0(2d); 4.3(6h); 4.2(3s); 4.3(6i) |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-76459?
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76459 are related to out-of-bounds write issues that are grouped under the Common Weakness Enumeration (CWE) CWE-787.
How severe is CVE-2026-76459?
CVE-2026-76459 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.28% probability of exploitation in the next 30 days.
How do I fix CVE-2026-76459?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-76453As part of Cisco's ongoing commitment to proactive security …8.8
- CVE-2026-76454A vulnerability in the Cisco Smart Licensing Utility API of …9.1
- CVE-2026-76455As part of Cisco's ongoing commitment to proactive security …9.8
- CVE-2026-76456As part of Cisco's ongoing commitment to proactive security …8.6
- CVE-2026-76457As part of Cisco's ongoing commitment to proactive security …8.6
- CVE-2026-76458As part of Cisco's ongoing commitment to proactive security …8.6
- CVE-2026-7646IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read a…6.5
- CVE-2026-76460A vulnerability in an API of Cisco Identity Services Engine …10
- CVE-2026-76461A vulnerability in the email parsing of Cisco AsyncOS Softwa…9.8
- CVE-2026-76463As part of Cisco's ongoing commitment to proactive security …8.8
- CVE-2026-76464As part of Cisco's ongoing commitment to proactive security …9.6
- CVE-2026-76465A vulnerability in the MPLS Operation, Administration, and M…9.8
Are you affected by CVE-2026-76459?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST