CVE-2026-76485

Name of the Vulnerable Software and Affected Versions Cisco Nexus 3000 Series Switches (affected versions not specified) Cisco Nexus 9000 Series Switches (affected versions not specified)

Description An issue exists in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, specifically the NGOAM component. This is caused by improper input validation of IP traffic when the NGOAM feature is enabled. An unauthenticated remote attacker can exploit this by sending crafted packets to an IP interface, potentially leading to arbitrary code execution with root privileges or a Denial-of-Service (DoS) condition caused by process crashes and device reloads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation measure, disable the NGOAM feature to prevent exploitation.