Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76453 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Scores

EPSS (exploitation in 30 days)

0.34% · top 73% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

• CWE-707: Improper Neutralization (opens in a new tab)All about CWE-707 and its CVEs

Affected products

• Cisco · Cisco NX-OS Software

  • affected 8.2(5)
  • affected 7.3(5)D1(1)
  • affected 8.4(2)
  • affected 8.4(3)
  • affected 9.2(3)
  • affected 8.2(1)
  • affected 7.3(1)D1(1)
  • affected 9.2(2v)
  • affected 7.3(0)D1(1)
  • affected 7.3(4)D1(1)
  • affected 9.2(1)
  • affected 9.2(2t)
  • affected 9.2(3y)
  • affected 9.3(2)
  • affected 7.3(1)DY(1)
  • affected 8.1(1)
  • affected 8.2(2)
  • affected 8.3(2)
  • affected 7.3(2)D1(3a)
  • affected 9.2(4)
  • affected 8.1(2)
  • affected 7.3(3)D1(1)
  • affected 8.2(3)
  • affected 8.3(1)
  • affected 8.4(1)
  • affected 8.1(1b)
  • affected 7.3(0)DX(1)
  • affected 7.3(2)D1(1)
  • affected 9.3(1)
  • affected 7.3(2)D1(2)
  • affected 8.2(4)
  • affected 7.3(0)DY(1)
  • affected 9.3(1z)
  • affected 9.2(2)
  • affected 8.1(2a)
  • affected 7.3(2)D1(3)
  • affected 8.1(1a)
  • affected 8.4(1a)
  • affected 9.3(3)
  • affected 7.3(2)D1(1d)
  • and 106 more

• Cisco · Cisco NX-OS System Software in ACI Mode

  • affected 15.2(1g)
  • affected 15.2(2e)
  • affected 15.2(2f)
  • affected 15.2(2g)
  • affected 15.2(2h)
  • affected 15.2(3f)
  • affected 15.2(3e)
  • affected 15.2(3g)
  • affected 15.2(4d)
  • affected 15.2(4e)
  • affected 15.2(5c)
  • affected 15.2(5d)
  • affected 16.0(1g)
  • affected 15.2(5e)
  • affected 15.2(4f)
  • affected 15.2(6e)
  • affected 15.2(6h)
  • affected 16.0(1j)
  • affected 15.2(6g)
  • affected 15.2(7f)
  • affected 15.2(7g)
  • affected 16.0(2h)
  • affected 15.2(8d)
  • affected 16.0(2j)
  • affected 15.2(8e)
  • affected 16.0(3d)
  • affected 16.0(3e)
  • affected 15.2(8f)
  • affected 15.2(8g)
  • affected 15.3(1d)
  • affected 15.2(8h)
  • affected 16.0(4c)
  • affected 15.3(2a)
  • affected 15.2(8i)
  • affected 16.0(5h)
  • affected 15.3(2b)
  • affected 16.0(3g)
  • affected 16.0(5j)
  • affected 15.3(2c)
  • affected 16.0(6c)
  • and 21 more

• Cisco · Cisco Unified Computing System (Managed)

  • affected 4.0(1a)
  • affected 4.1(1d)
  • affected 4.0(4f)
  • affected 4.0(4c)
  • affected 4.0(2b)
  • affected 4.1(2a)
  • affected 4.0(4a)
  • affected 4.0(4e)
  • affected 4.0(4h)
  • affected 4.0(2a)
  • affected 4.1(1c)
  • affected 4.0(1b)
  • affected 4.1(1e)
  • affected 4.0(4d)
  • affected 4.0(4b)
  • affected 4.0(2e)
  • affected 4.1(1a)
  • affected 4.0(4g)
  • affected 4.0(1d)
  • affected 4.0(1c)
  • affected 4.0(4i)
  • affected 4.0(2d)
  • affected 4.1(1b)
  • affected 4.1(2b)
  • affected 4.0(4k)
  • affected 4.1(3a)
  • affected 4.1(3b)
  • affected 4.1(2c)
  • affected 4.0(4l)
  • affected 4.1(4a)
  • affected 4.1(3c)
  • affected 4.1(3d)
  • affected 4.2(1c)
  • affected 4.2(1d)
  • affected 4.0(4m)
  • affected 4.1(3e)
  • affected 4.2(1f)
  • affected 4.1(3f)
  • affected 4.2(1i)
  • affected 4.1(3h)
  • and 65 more

What to do

Exploitation: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

References (1)

• cisco-sa-hardening-nxosw1-cWzSbtR (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-76453](https://trackcve.app/badge/CVE-2026-76453.svg)](https://trackcve.app/cve/CVE-2026-76453)

Record last updated 8 Oct 2026, 13:00 UTC.