OTPulse

Cisco NX-OS Software Security Hardening Release: October 2026

Plan PatchCVSS 9.8cisco-sa-hardening-nxosw1-cWzSbtROct 7, 2026
Cisco
IT in OT - Cisco networking products are commonly deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary

Cisco conducted an internal security review of NX-OS Software and identified multiple vulnerabilities grouped under a single CVE based on their underlying weakness classes. The vulnerabilities were discovered during internal testing and are not known to be actively exploited. Cisco has released software updates to address these issues. These vulnerabilities affect NX-OS Software versions 9.4(5) through 10.3(1) and all versions of NX-OS System Software running in ACI Mode. No workarounds are available.

What this means
What could happen
Multiple remotely exploitable vulnerabilities in NX-OS could allow an unauthenticated attacker to gain full control of affected switches, potentially disrupting network operations or enabling lateral movement into critical infrastructure.
Who's at risk
Network operators managing Cisco Nexus switches running NX-OS software (versions 9.4(5) through 10.3(1)), particularly those in ACI deployments, need to assess exposure. This affects data center switches, campus core switches, and Cisco ACI fabric nodes that may be critical to industrial network connectivity.
How it could be exploited
An attacker on the network can reach the NX-OS device remotely without credentials and exploit one of the underlying vulnerabilities (grouped under this CVE) to execute arbitrary code or bypass security controls on the switch.
Prerequisites
  • Network access to the affected NX-OS device
  • No authentication required
remotely exploitableno authentication requiredlow complexitycritical severity (CVSS 9.8)multiple vulnerabilities grouped in single CVE
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (2)
2 with fix
ProductAffected VersionsFix Status
Cisco NX-OS Software Security Hardening Release: October 202610.3(1) through 9.4(5)Fix available
NX-OS System Software in ACI ModeAll versionsFix available
Remediation & Mitigation
0/4
Do now
0/1
WORKAROUNDRestrict network access to management interfaces and SSH/SNMP ports on affected switches to authorized administrators only
Schedule — requires maintenance window
0/2

Patching may require device reboot — plan for process interruption

HOTFIXUpdate Cisco NX-OS Software to version 10.3(1) or later, or apply the latest patch for your current version
HOTFIXUpdate NX-OS System Software running in ACI Mode to the latest vendor-provided patch
Long-term hardening
0/1
HARDENINGSegment OT network to limit direct reachability to NX-OS devices from untrusted networks
View full vendor advisory
API: /api/v1/advisories/550d4fec-a9a0-4f4d-bfc5-c1c8f2fd0eba

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.