CVE-2026-76486

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description An issue exists in the VXLAN Operation, Administration, and Maintenance (OAM) feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote attacker can exploit this by sending crafted packets to an IP interface on a device where the NGOAM feature is enabled. This could lead to the execution of arbitrary code with root privileges or cause process crashes, resulting in a device reload and a Denial-of-Service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation measure, disable the NGOAM feature to minimize the risk of exploitation.