Cisco Rushes Patches for Critical Root-Privilege Flaws in Nexus Switches
Cisco published security advisory cisco-sa-ngoam-rce-LWKQ4BU on October 7, 2026, covering three critical vulnerabilities — CVE-2026-76485, CVE-2026-76486, and CVE-2026-76501 — in the Next Generation Operation, Administration, and Maintenance (NGOAM) feature of NX-OS software on Nexus 3000 and standalone-mode 9000 Series switches. Each scores CVSS 9.8: an unauthenticated remote attacker can send crafted packets to an IP interface and execute code with root privileges, or crash processes and force device reloads in a denial-of-service attack.