CVE-2026-76501

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description An issue exists in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature, known as NGOAM. This is caused by improper input validation of IP traffic when both NGOAM and SRv6 features are enabled. An unauthenticated remote attacker can exploit this by sending crafted packets to an IP interface, potentially leading to arbitrary code execution with root privileges or a denial of service (DoS) via process crashes and device reloads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, disable the NGOAM and SRv6 features to prevent exploitation.