Security fixes in Release 6.0(2.260080)
Security Hardening Updates
Cisco NX-OS Software updates include security hardening to address multiple vulnerabilities identified during internal testing. Cisco is not aware of these vulnerabilities being actively exploited. Related issues are grouped by Common Weakness Enumeration (CWE) and associated with a single Common Vulnerabilities and Exposures (CVE) identifier to support customer remediation and disclosure.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
|
CVE ID |
Description |
|---|---|
|
CVE-2026-76453 |
Improper neutralization (covers command, OS, and argument injection) |
|
CVE-2026-76455 |
Improper access control (covers authorization, authentication, privileges, and bypasses) |
|
CVE-2026-76456 |
Improper input validation (covers input validation, path traversal, and external path control) |
|
CVE-2026-76457 |
Out-of-bounds read (covers buffer over-read and exposure of sensitive information) |
|
CVE-2026-76458 |
Improper handling of exceptional conditions (covers uncaught exceptions and reachable assertions) |
|
CVE-2026-76459 |
Out-of-bounds write (covers stack-based buffer overflow, heap-based buffer overflow, classic buffer overflow, and incorrect buffer size calculation) |
This advisory is available at the following link:
Cisco NX-OS Software Security Hardening Release: October 2026
Feedback