Cisco NX-OS / Nexus Security Advisories & Vulnerabilities
Recent Cisco PSIRT advisories affecting NX-OS software on Nexus data center switches. Search, check severity and CVSS, and get a remediation or refresh quote from an authorized Cisco partner.
38 recent advisories affecting Cisco NX-OS / Nexus
Cisco Nexus Dashboard Fabric Controller Arbitrary Command Execution Vulnerability
Critical · CVSS 9.9CVE-2024-20432Published Oct 2, 2024cisco-sa-ndfc-cmdinj-UvYZrKfrAffected: Cisco Data Center Network Manager
Cisco Nexus Dashboard Unauthorized Access Vulnerabilities
Critical · CVSS 9.8CVE-2022-20857, CVE-2022-20858, CVE-2022-20861Published Jul 20, 2022cisco-sa-ndb-mhcvuln-vpsBPJ9yAffected: Cisco Nexus Dashboard
Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
High · CVSS 7.4CVE-2026-20010Published Feb 25, 2026cisco-sa-n3kn9k_aci_lldp_dos-NdgRrrA3Affected: Cisco Unified Computing System (Managed) , Cisco NX-OS Software 10.3(1), Cisco NX-OS Software 10.3(2), Cisco NX-OS Software 10.3(3), Cisco NX-OS Software 10.3(99w), Cisco NX-OS Software 10.3(3w), and 33 more
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial of Service Vulnerability
High · CVSS 7.4CVE-2026-20033Published Feb 25, 2026cisco-sa-nxos-cpdos-qLsv6pFDAffected: Cisco NX-OS System Software in ACI Mode 15.2(1g), Cisco NX-OS System Software in ACI Mode 15.2(2e), Cisco NX-OS System Software in ACI Mode 15.2(2f), Cisco NX-OS System Software in ACI Mode 15.2(2g), Cisco NX-OS System Software in ACI Mode 15.2(2h), Cisco NX-OS System Software in ACI Mode 15.2(3e), and 51 more
Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability
High · CVSS 7.7CVE-2026-20048Published Feb 25, 2026cisco-sa-nxos-dsnmp-cNN39UhAffected: Cisco NX-OS System Software in ACI Mode 15.2(1g), Cisco NX-OS System Software in ACI Mode 15.2(2e), Cisco NX-OS System Software in ACI Mode 15.2(2f), Cisco NX-OS System Software in ACI Mode 15.2(2g), Cisco NX-OS System Software in ACI Mode 15.2(2h), Cisco NX-OS System Software in ACI Mode 15.2(3e), and 51 more
Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability
High · CVSS 7.4CVE-2026-20051Published Feb 25, 2026cisco-sa-nxos-ether-dos-Kv8YNWZ4Affected: Cisco NX-OS Software 9.2(1), Cisco NX-OS Software 9.2(2), Cisco NX-OS Software 9.2(2t), Cisco NX-OS Software 9.2(3), Cisco NX-OS Software 9.2(3y), Cisco NX-OS Software 9.2(4), and 69 more
Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
High · CVSS 7.4CVE-2025-20241Published Aug 27, 2025cisco-sa-n39k-isis-dos-JhJA8RfxAffected: Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), Cisco NX-OS Software 6.0(2)A8(5), and 120 more
Cisco Nexus Dashboard Fabric Controller SSH Host Key Validation Vulnerability
High · CVSS 8.7CVE-2025-20163Published Jun 4, 2025cisco-sa-ndfc-shkv-snQJtjrpAffected: Cisco Data Center Network Manager , Cisco Nexus Dashboard
Multiple Cisco Products Switch Integrated Security Features DHCPv6 Denial of Service Vulnerability
High · CVSS 7.4CVE-2025-20191Published May 7, 2025cisco-sa-sisf-dos-ZGwt4DdYAffected: Cisco IOS 15.2(6)E, Cisco IOS 15.2(6)E0a, Cisco IOS 15.2(6)E1, Cisco IOS 15.2(6)E0c, Cisco IOS 15.2(6)E2, Cisco IOS 15.2(6)E1a, and 322 more
Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
High · CVSS 7.4CVE-2025-20111Published Feb 26, 2025cisco-sa-n3kn9k-healthdos-eOqSWK4gAffected: Cisco NX-OS Software 9.3(1), Cisco NX-OS Software 9.3(2), Cisco NX-OS Software 9.3(3), Cisco NX-OS Software 9.3(1z), Cisco NX-OS Software 9.3(4), Cisco NX-OS Software 9.3(5), and 47 more
Cisco NX-OS Software Image Verification Bypass Vulnerability
High · CVSS 5.2CVE-2024-20397Published Dec 4, 2024cisco-sa-nxos-image-sig-bypas-pQDRQvjLAffected: Cisco Unified Computing System (Managed) , Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), and 303 more
Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability
High · CVSS 8.8CVE-2024-20536Published Nov 6, 2024cisco-sa-ndfc-sqli-CyPPAxrLAffected: Cisco Data Center Network Manager
Cisco Nexus Dashboard Fabric Controller Remote Code Execution Vulnerability
High · CVSS 8.8CVE-2024-20449Published Oct 2, 2024cisco-sa-ndfc-ptrce-BUSHLbpAffected: Cisco Data Center Network Manager
Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability
High · CVSS 8.6CVE-2024-20446Published Aug 28, 2024cisco-sa-nxos-dhcp6-relay-dos-znEAA6xnAffected: Cisco NX-OS Software 8.2(11), Cisco NX-OS Software 9.3(9), Cisco NX-OS Software 10.2(1), Cisco NX-OS Software 10.2(1q)
Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability
High · CVSS 7.5CVE-2024-20348Published Apr 3, 2024cisco-sa-ndfc-dir-trav-SSn3AYDwAffected: Cisco Data Center Network Manager
Cisco NX-OS Software MPLS Encapsulated IPv6 Denial of Service Vulnerability
High · CVSS 8.6CVE-2024-20267Published Feb 28, 2024cisco-sa-ipv6-mpls-dos-R9ycXkwMAffected: Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), Cisco NX-OS Software 6.0(2)A8(5), and 109 more
Cisco NX-OS Software External Border Gateway Protocol Denial of Service Vulnerability
High · CVSS 8.6CVE-2024-20321Published Feb 28, 2024cisco-sa-nxos-ebgp-dos-L3QCwVJAffected: Cisco NX-OS Software 7.0(3)F3(1), Cisco NX-OS Software 7.0(3)F3(2), Cisco NX-OS Software 7.0(3)F3(3), Cisco NX-OS Software 7.0(3)F3(3a), Cisco NX-OS Software 7.0(3)F3(4), Cisco NX-OS Software 7.0(3)F3(3c), and 53 more
HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023
High · CVSS 7.5CVE-2023-44487Published Oct 16, 2023cisco-sa-http2-reset-d8Kf32vZAffected: Cisco Unified Contact Center Enterprise , Cisco NX-OS Software , Cisco Secure Web Appliance , Cisco Prime Network Registrar , Cisco TelePresence Video Communication Server (VCS) Expressway , Cisco Evolved Programmable Network Manager (EPNM) , and 5 more
Cisco NX-OS Software TACACS+ or RADIUS Remote Authentication Directed Request Denial of Service Vulnerability
High · CVSS 7.1CVE-2023-20168Published Aug 23, 2023cisco-sa-nxos-remoteauth-dos-XB6pv74mAffected: Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), Cisco NX-OS Software 6.0(2)A8(5), and 168 more
Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability
High · CVSS 7.4CVE-2023-20169Published Aug 23, 2023cisco-sa-nxos-n3_9k-isis-dos-FTCXB4VbAffected: Cisco NX-OS Software 10.3(2)
Cisco ACI Multi-Site CloudSec Encryption Information Disclosure Vulnerability
High · CVSS 7.4CVE-2023-20185Published Jul 5, 2023cisco-sa-aci-cloudsec-enc-Vs5Wn2sXAffected: Cisco NX-OS System Software in ACI Mode 14.0(1h), Cisco NX-OS System Software in ACI Mode 14.0(2c), Cisco NX-OS System Software in ACI Mode 14.0(3d), Cisco NX-OS System Software in ACI Mode 14.0(3c), Cisco NX-OS System Software in ACI Mode 14.1(1i), Cisco NX-OS System Software in ACI Mode 14.1(1j), and 107 more
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability
High · CVSS 7.4CVE-2023-20089Published Feb 22, 2023cisco-sa-aci-lldp-dos-ySCNZOpXAffected: Cisco NX-OS System Software in ACI Mode , Cisco NX-OS System Software in ACI Mode 15.2(1g), Cisco NX-OS System Software in ACI Mode 15.2(2e), Cisco NX-OS System Software in ACI Mode 15.2(2f), Cisco NX-OS System Software in ACI Mode 15.2(2g), Cisco NX-OS System Software in ACI Mode 15.2(2h), and 11 more
Cisco Nexus Dashboard Denial of Service Vulnerability
High · CVSS 7.5CVE-2023-20014Published Feb 15, 2023cisco-sa-ndb-dnsdos-bYscZOsuAffected: Cisco Nexus Dashboard
Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability
High · CVSS 8.6CVE-2022-20823Published Aug 24, 2022cisco-sa-nxos-ospfv3-dos-48qutcuAffected: Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), Cisco NX-OS Software 6.0(2)A8(5), and 225 more
Cisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution Vulnerability
High · CVSS 8.8CVE-2022-20824Published Aug 24, 2022cisco-sa-nxos-cdp-dos-ce-wWvPucC9Affected: Cisco Unified Computing System (Managed) , Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), and 303 more
Cisco ACI Multi-Site Orchestrator Privilege Escalation Vulnerability
High · CVSS 8.8CVE-2022-20921Published Aug 24, 2022cisco-sa-mso-prvesc-BPFp9cZsAffected: Cisco Nexus Dashboard Orchestrator
Cisco Nexus Dashboard SSL Certificate Validation Vulnerability
High · CVSS 7.4CVE-2022-20860Published Jul 20, 2022cisco-sa-nd-tlsvld-TbAQLp3NAffected: Cisco Nexus Dashboard
Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability
High · CVSS 8.6CVE-2022-20623Published Feb 23, 2022cisco-sa-nxos-bfd-dos-wGQXrzxnAffected: Cisco NX-OS Software 7.0(3)I6(2), Cisco NX-OS Software 7.0(3)I7(1), Cisco NX-OS Software 7.0(3)I7(2), Cisco NX-OS Software 7.0(3)I7(3), Cisco NX-OS Software 7.0(3)I7(4), Cisco NX-OS Software 7.0(3)I7(5), and 33 more
Cisco NX-OS Software NX-API Command Injection Vulnerability
High · CVSS 8.8CVE-2022-20650Published Feb 23, 2022cisco-sa-nxos-nxapi-cmdinject-ULukNMZ2Affected: Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), Cisco NX-OS Software 6.0(2)A8(5), and 100 more
Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability
High · CVSS 8.6CVE-2022-20624Published Feb 23, 2022cisco-sa-cfsoip-dos-tpykyDrAffected: Cisco Unified Computing System (Managed) , Cisco Unified Computing System (Standalone) , Cisco Unified Computing System E-Series Software (UCSE) , Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), and 80 more
Cisco NX-OS Software MPLS OAM Denial of Service Vulnerability
High · CVSS 8.6CVE-2021-1588Published Aug 25, 2021cisco-sa-nxos-mpls-oam-dos-sGO9x5GMAffected: Cisco NX-OS Software 6.0(2)A8(1), Cisco NX-OS Software 6.0(2)A8(2), Cisco NX-OS Software 6.0(2)A8(3), Cisco NX-OS Software 6.0(2)A8(4), Cisco NX-OS Software 6.0(2)A8(4a), Cisco NX-OS Software 6.0(2)A8(5), and 103 more
Cisco Nexus 9000 Series Fabric Switches ACI Mode Multi-Pod and Multi-Site TCP Denial of Service Vulnerability
High · CVSS 8.6CVE-2021-1586Published Aug 25, 2021cisco-sa-n9kaci-tcp-dos-YXukt6gMAffected: Cisco NX-OS System Software in ACI Mode 13.2(1l), Cisco NX-OS System Software in ACI Mode 13.2(1m), Cisco NX-OS System Software in ACI Mode 13.2(2l), Cisco NX-OS System Software in ACI Mode 13.2(2o), Cisco NX-OS System Software in ACI Mode 13.2(3i), Cisco NX-OS System Software in ACI Mode 13.2(3n), and 76 more
Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability
High · CVSS 8.6CVE-2021-1523Published Aug 25, 2021cisco-sa-n9kaci-queue-wedge-cLDDEfKFAffected: Cisco NX-OS System Software in ACI Mode 13.2(1l), Cisco NX-OS System Software in ACI Mode 13.2(1m), Cisco NX-OS System Software in ACI Mode 13.2(2l), Cisco NX-OS System Software in ACI Mode 13.2(2o), Cisco NX-OS System Software in ACI Mode 13.2(3i), Cisco NX-OS System Software in ACI Mode 13.2(3n), and 54 more
Cisco NX-OS Software VXLAN OAM (NGOAM) Denial of Service Vulnerability
High · CVSS 8.6CVE-2021-1587Published Aug 25, 2021cisco-sa-nxos-ngoam-dos-LTDb9HvAffected: Cisco NX-OS Software 9.2(1), Cisco NX-OS Software 9.2(2), Cisco NX-OS Software 9.2(2t), Cisco NX-OS Software 9.2(3), Cisco NX-OS Software 9.2(3y), Cisco NX-OS Software 9.2(4), and 13 more
Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability
Medium · CVSS 6.8CVE-2026-20171Published May 20, 2026cisco-sa-bgp-iefab-3hb2pwtxAffected: Cisco NX-OS Software 10.2(1), Cisco NX-OS Software 10.2(1q), Cisco NX-OS Software 10.2(2), Cisco NX-OS Software 10.2(3), Cisco NX-OS Software 10.2(2a), Cisco NX-OS Software 10.2(3t), and 43 more
Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability
Medium · CVSS 4.9CVE-2026-20174Published Apr 1, 2026cisco-sa-ndi-afw-rJuRC5dZAffected: Cisco Nexus Dashboard , Cisco Nexus Dashboard Insights
Cisco Nexus Dashboard and Nexus Dashboard Insights Server-Side Request Forgery Vulnerability
Medium · CVSS 6.1CVE-2026-20041Published Apr 1, 2026cisco-sa-nd-ssrf-NAen4O7rAffected: Cisco Nexus Dashboard , Cisco Nexus Dashboard Insights
Cisco Nexus Dashboard Configuration Backup REST API Unauthorized Access Vulnerability
Medium · CVSS 6.5CVE-2026-20042Published Apr 1, 2026cisco-sa-nd-cbid-5YqkOSHuAffected: Cisco Nexus Dashboard
Find out which Cisco vulnerabilities affect your Cisco NX-OS / Nexus
Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.
- Affected CVEs & severity
- Fixed release or replacement
- End-of-life check
- GPC-payable quote
Frequently asked questions
What are the latest Cisco NX-OS / Nexus security advisories?
This page lists recent Cisco security advisories affecting Cisco NX-OS / Nexus, from the Cisco PSIRT openVuln feed, with severity, CVSS, and CVEs. Confirm the affected software versions against what you run.
How do I fix a Cisco NX-OS / Nexus vulnerability?
Most Cisco vulnerabilities are fixed by upgrading to a patched software release or applying the documented mitigation. If the platform is end-of-life, the remedy is a refresh. Uniqcli, an authorized Cisco partner, scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.
Is Cisco NX-OS / Nexus still supported?
Security fixes are only available while a product is supported. Check our Cisco end-of-life lookup to confirm the Last Date of Support, then patch (if supported) or plan a refresh with Uniqcli.
Data from the Cisco PSIRT openVuln API, shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.
