CVE-2026-76458— Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities
Quick assessment
Affected
Cisco Cisco NX-OS Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
为持续践行对主动安全和产品质量的承诺，Cisco NX-OS 工程团队开展了一次全面的内部安全审查。此次审查促使发布了一个软件加固版本，用于修复多个在内部发现的漏洞。 与 CVE-2026-76458 相关的漏洞属于“异常条件处理不当”（Improper Handling of Exceptional Conditions）类问题，在通用弱点枚举（CWE）中归类为 CWE-703。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76458
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76458 are related to improper handling of exceptional conditions issues that are grouped under the Common Weakness Enumeration (CWE) CWE-703.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对异常条件检查或处理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS Software | 8.2(5) | - |
|
| Cisco | Cisco NX-OS System Software in ACI Mode | 15.2(1g) | - |
|
| Cisco | Cisco Unified Computing System (Managed) | 4.0(1a) | - |
|
II. Public POCs for CVE-2026-76458
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76458
请登录查看更多情报信息。
Other References for CVE-2026-76458 (1)
Same Patch Batch · Cisco · 2026-10-07 · 36 CVEs total
| CVE-2026-76482 | 10.0 CRITICAL | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76465 | 9.8 CRITICAL | Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability |
| CVE-2026-76455 | 9.8 CRITICAL | Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vu |
| CVE-2026-76471 | 9.8 CRITICAL | Cisco NX-OS Software NX-API Remote Code Execution Vulnerability |
| CVE-2026-76480 | 9.8 CRITICAL | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76500 | 9.8 CRITICAL | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Impro |
| CVE-2026-76501 | 9.8 CRITICAL | Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability |
| CVE-2026-76498 | 9.8 CRITICAL | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Impro |
| CVE-2026-76499 | 9.8 CRITICAL | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Impro |
| CVE-2026-76486 | 9.8 CRITICAL | Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerab |
| CVE-2026-76485 | 9.8 CRITICAL | Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerab |
| CVE-2026-76464 | 9.6 CRITICAL | Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities |
| CVE-2026-76454 | 9.1 CRITICAL | Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability |
| CVE-2026-76483 | 9.1 CRITICAL | Cisco License On-Prem Security Hardening Release |
| CVE-2026-20328 | 9.1 CRITICAL | Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability |
| CVE-2026-76484 | 8.8 HIGH | Cisco License On-Prem Security Hardening Release |
| CVE-2026-76453 | 8.8 HIGH | Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vu |
| CVE-2026-76463 | 8.8 HIGH | Cisco Meraki Security Hardening Release: October 2026 - Improper Access Control Vulnerabil |
| CVE-2026-76459 | 8.8 HIGH | Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulner |
| CVE-2026-76470 | 8.8 HIGH | Cisco Meraki Hardening Release - Incorrect Calculation Vulnerabilities |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco NX-OS Software
-
CVE-2026-76501
Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Cod -
CVE-2026-76486
Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) -
CVE-2026-76485
Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) -
CVE-2026-76459
Cisco NX-OS Software Security Hardening Release: October 202 -
CVE-2026-76471
Cisco NX-OS Software NX-API Remote Code Execution Vulnerabil
Same vendor: Cisco
-
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff -
CVE-2026-76468
Cisco Meraki Hardening Release - Input Validation Vulnerabil
Same weakness: CWE-703
-
CVE-2026-61822
pg_partman disable maintenance for all partition sets -
CVE-2026-92790
Higress before 2.2.4 Rate Limit Bypass via Malformed Cookie -
CVE-2026-20329
Cisco Secure Adaptive Security Appliance Software, Secure Fi -
CVE-2026-80135
Dell Secure Connect Gateway 异常处理不当漏洞 -
CVE-2026-57445
Gardens v2: Approve-side dispute resolution drains active st
V. Comments for CVE-2026-76458
No comments yet