CVE-2026-20048— Cisco NX-OS Software SNMP Denial of Service Vulnerability
Quick assessment
Affected
Cisco Cisco NX-OS System Software in ACI Mode
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Nexus 9000 Series Fabric Switches是美国思科（Cisco）公司的一款9000系列光纤交换机。 Cisco Nexus 9000 Series Fabric Switches存在安全漏洞，该漏洞源于解析SNMP请求时处理不当，可能导致内核崩溃和设备重新加载，造成拒绝服务。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-20048
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco NX-OS Software SNMP Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper processing when parsing SNMP requests. An attacker could exploit this vulnerability by continuously sending SNMP queries to a specific MIB of an affected device. A successful exploit could allow the attacker to cause a kernel panic on the device, resulting in a reload and a DoS condition.
Note: This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv1 or SNMPv2c, the attacker must have a valid read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的内存分配
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Nexus 9000 Series Fabric Switches 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Nexus 9000 Series Fabric Switches是美国思科（Cisco）公司的一款9000系列光纤交换机。 Cisco Nexus 9000 Series Fabric Switches存在安全漏洞，该漏洞源于解析SNMP请求时处理不当，可能导致内核崩溃和设备重新加载，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS System Software in ACI Mode | 15.2(1g) | - |
|
II. Public POCs for CVE-2026-20048
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20048
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20048 (1)
Same Patch Batch · Cisco · 2026-02-25 · 15 CVEs total
| CVE-2026-20127 | 10.0 CRITICAL | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability |
| CVE-2026-20129 | 9.8 CRITICAL | Cisco Catayst SD-WAN Authentication Bypass Vulnerability |
| CVE-2026-20126 | 8.8 HIGH | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability |
| CVE-2026-20128 | 7.5 HIGH | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability |
| CVE-2026-20033 | 7.4 HIGH | Cisco NX-OS Software Denial of Service Vulnerability |
| CVE-2026-20010 | 7.4 HIGH | Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service |
| CVE-2026-20051 | 7.4 HIGH | Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vu |
| CVE-2026-20099 | 6.7 MEDIUM | Cisco UCS Manager and FXOS Software Command Injection Vulnerability |
| CVE-2026-20036 | 6.5 MEDIUM | Cisco UCS Manager Software Command Injection Vulnerability |
| CVE-2026-20133 | 6.5 MEDIUM | Cisco Catalyst SD-WAN Manager（Cisco SD-WAN vManage） 信息泄露漏洞 |
| CVE-2026-20107 | 5.5 MEDIUM | Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability |
| CVE-2026-20122 | 5.4 MEDIUM | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability |
| CVE-2026-20091 | 4.8 MEDIUM | Cisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability |
| CVE-2026-20037 | 4.4 MEDIUM | Cisco UCS Manager File Write Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco NX-OS System Software in ACI Mode
-
CVE-2026-20033
Cisco NX-OS Software Denial of Service Vulnerability -
CVE-2023-20185
Cisco Nexus 9000 Series Fabric Switches 加密问题漏洞 -
CVE-2023-20089
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Lay -
CVE-2021-1586
Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod a -
CVE-2021-1584
Cisco Nexus 9000 Series Fabric Switches ACI Mode Privilege E
Same vendor: Cisco
-
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability -
CVE-2026-76447
Cisco Identity Services Engine Certificate Reload Vulnerabil
Same weakness: CWE-789
-
CVE-2026-102510
Apache PLC4X: Go binding: unbounded allocation and framing f -
CVE-2026-102509
Apache PLC4X, Apache PLC4X: Pre-authentication resource exha -
CVE-2026-102809
PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file -
CVE-2026-92550
Apache Qpid Broker-J: Type size/count handling can lead to e -
CVE-2026-96260
Mattermost server missing request body size limit on plugin
V. Comments for CVE-2026-20048
No comments yet