CVE-2026-76471

Summary

This vulnerability allows an attacker to execute arbitrary code with root privileges or cause a DoS condition by sending a crafted HTTP request to the NX-API, posing a significant risk to the device's security and availability.

Exploitability

Exploitation requires sending a crafted HTTP request to the NX-API, which can be moderately difficult if the attacker has network access to the device.

Blast radius

If exploited, the vulnerability could result in complete control of the device by the attacker, leading to potential data loss, system compromise, and denial of service.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of Cisco NX-OS Software as specified in the vendor advisory.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.