CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0406 Vulnerabilities Fixed in Cisco NX-OS Software

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9742

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0406 Vulnerabilities Fixed in Cisco NX-OS Software

Cisco has patched multiple vulnerabilities in NX-OS Software affecting various components. The flaws include a Python interpreter sandbox escape allowing authenticated local attackers to execute arbitrary commands, an NX-application programming interface (API) flaw permitting unauthenticated remote code execution or denial of service, insufficient rate limiting on certain protocols enabling resource exhaustion, and several internally discovered issues related to input validation, access control, and memory safety. No active exploitation has been reported.

Why it matters: Network administrators running Cisco NX-OS must apply these patches immediately to prevent local privilege escalation, remote code execution with root privileges, and denial of service attacks on network infrastructure.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

NCSC-2026-0406 Vulnerabilities Fixed in Cisco NX-OS Software

Cisco has patched multiple vulnerabilities in NX-OS Software affecting various components. The flaws include a Python interpreter sandbox escape allowing authenticated local attackers to execute arbitrary commands, an NX-application programming interface (API) flaw permitting unauthenticated remote code execution or denial of service, insufficient rate limiting on certain protocols enabling resource exhaustion, and several internally discovered issues related to input validation, access control, and memory safety. No active exploitation has been reported.

Why it matters: Network administrators running Cisco NX-OS must apply these patches immediately to prevent local privilege escalation, remote code execution with root privileges, and denial of service attacks on network infrastructure.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

NCSC-2026-0406 Vulnerabilities Fixed in Cisco NX-OS Software

Cisco has patched multiple vulnerabilities in NX-OS Software affecting various components. The flaws include a Python interpreter sandbox escape allowing authenticated local attackers to execute arbitrary commands, an NX-application programming interface (API) flaw permitting unauthenticated remote code execution or denial of service, insufficient rate limiting on certain protocols enabling resource exhaustion, and several internally discovered issues related to input validation, access control, and memory safety. No active exploitation has been reported.

Why it matters: Network administrators running Cisco NX-OS must apply these patches immediately to prevent local privilege escalation, remote code execution with root privileges, and denial of service attacks on network infrastructure.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary