MDR
Solutions
Partners
About
Resources
Affected Environment
Cisco NX-OS devices (Nexus, MDS, UCS), Meraki, License On-Prem, APIC, and Finesse contact center products.
Threat Overview
Multiple critical flaws, including unauthenticated NX-OS remote code execution (CVSS 9.8) and a CVSS 10 License On-Prem flaw, CVE-2026-76482.
Exposure Timeline
Advisories published October 2026; some Meraki, Finesse, and Contact Center fixes arrive late October 2026 to February 2027.
Attack Surface
NX-API, NGOAM, MPLS OAM, web management interfaces, and APIs on Nexus switches, License On-Prem, APIC, and Meraki.
Technical Root Cause
Insufficient input validation, memory handling, access control, and authentication flaws across NX-OS, Meraki, License On-Prem, and APIC.
Exploitation Pathway
Unauthenticated attackers send crafted HTTP requests or packets to enabled features, gaining root code execution or crashing devices.
Operational Impact
Root code execution, device reloads, unauthorised licensing access, and loss of data centre network control.
Strategic Impact
Data centre and campus infrastructure compromise threatens availability and segmentation; all entity sizes rated Critical.
Required Mitigation
Upgrade to the Cisco fixed releases listed per product; no workarounds exist, and some fixes arrive after October.
Incident Response Guidance
Review NX-OS, APIC, and License On-Prem logs for unauthorised access, privilege escalation, and unexpected reloads or configuration changes.
References
Cisco Security Advisories.
Trusted by clients worldwide
Led by human expertise and powered by the VisionX platform, we provide you with a 24/7 unbeatable Managed Detection & Response capability giving you transparent and consolidated security solutions.
.jpg)