Cisco Patches Critical Unauthenticated RCE Vulnerability in Nexus 3000/9000 Switches

Cisco has released an advisory and fixes for CVE-2026-76465, a critical unauthenticated remote code execution (RCE) vulnerability (CVSS v3.1 9.8) affecting MPLS OAM on Nexus 3000 and standalone-mode Nexus 9000 switches. A specially crafted MPLS echo request could lead to root code execution or a denial-of-service condition. MPLS OAM is disabled by default, and Nexus 9000 switches with Silicon One ASICs are not affected. No known public exploitation has been reported.