Critical Cisco NX-OS Flaws Threaten Nexus Switches

Cisco patched five critical NX-OS vulnerabilities (five CVEs, CVSS 3.1 scores 9.8) impacting Nexus 3000/9000 switches and UCS 6300 fabric interconnects that can allow unauthenticated or conditionally authenticated attackers to achieve root-level code execution or cause DoS when NX-API, NGOAM, SRv6, NV Overlay, or MPLS OAM features are enabled; Cisco recommends upgrading to fixed releases, disabling unnecessary features, applying Live Protect shields as temporary mitigations, and hunting for suspicious activity — Cisco reported no confirmed exploitation as of October 9, 2026.