Security1 hOctober 8, 2026, 12:24

Cisco Patches 18 CVEs, Including Three 9.8-Rated RCE Flaws in NX-OS

Cisco released fixes for 18 vulnerabilities, seven of them critical. Three unauthenticated RCE flaws rated CVSS 9.8 in the NGOAM (VXLAN OAM) feature affect Nexus 3000 and 9000 switches. No exploitation has been observed and no workarounds exist.

DEV Community

Open source

Cisco Patches 18 CVEs, Including Three 9.8-Rated RCE Flaws in NX-OS

CVE-2026-76485, CVE-2026-76486 and CVE-2026-76501 are unauthenticated RCE flaws rated CVSS 9.8
Affected: Cisco Nexus 3000 and 9000 switches via the NGOAM (VXLAN OAM) feature
CVE-2026-76501 requires SRv6 and hits Nexus 9000 only
No exploitation seen and no workarounds — patching is the only fix

#Cisco#Nexus

Apache httpd 2.4.69 fixes 20 CVEs, including a 9.8 privilege flaw

Security

Three Langflow flaws rated CVSS 9.8 allow unauthenticated RCE

Security

Antino backdoor uses Outlook and OneDrive for C2 in China-nexus campaign

Security

Cisco Patches 18 CVEs, Including Three 9.8-Rated RCE Flaws in NX-OS

Apache httpd 2.4.69 fixes 20 CVEs, including a 9.8 privilege flaw

Three Langflow flaws rated CVSS 9.8 allow unauthenticated RCE

Antino backdoor uses Outlook and OneDrive for C2 in China-nexus campaign

Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard