Cisco Addresses Critical Remote Code Execution Flaw in Nexus Switches

Cisco has issued an advisory and released patches for a critical unauthenticated remote code execution (RCE) vulnerability, CVE-2026-76465, affecting its Nexus 3000 and standalone-mode Nexus 9000 switches. This flaw, rated 9.8 CVSS v3.1, could allow attackers to execute root code or trigger a denial-of-service reload via a crafted MPLS echo request if MPLS OAM is enabled. It poses a significant risk to network infrastructure.