Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76458 are related to improper handling of exceptional conditions issues that are grouped under the Common Weakness Enumeration (CWE) CWE-703.
Published: 2026-10-07
Score: 8.6 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

The flaw stems from an improper handling of exceptional conditions in Cisco NX‑OS software. When an exception occurs, the system may respond unpredictably, potentially halting services or becoming unresponsive, which can be exploited to deny availability of network infrastructure. The vulnerability aligns with CWE‑703 and carries a high CVSS score of 8.6, indicating significant potential for harm if an attacker can trigger the defective code path.

Affected Systems

Affected items include Cisco NX‑OS Software, Cisco NX‑OS System Software in ACI Mode, and Cisco Unified Computing System (Managed). No specific version numbers are provided in the advisory, so administrators should review all NX‑OS deployments for applicability.

Risk and Exploitability

The CVSS score reflects a severe flaw, but the EPSS score is not available, and the vulnerability is not listed in CISA KEV. The attack vector is not explicitly documented; however, the nature of the exception handling suggests that either local or remote conditions could invoke the flaw depending on deployment. Given the high severity and lack of detailed exploitation evidence, the risk remains high and warrants prompt remediation.

Generated by OpenCVE AI on October 7, 2026 at 18:09 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download and install the Cisco NX‑OS security hardening release for October 2026 that addresses the improper handling of exceptional conditions flaw.
  • Reboot the NX‑OS devices (or reload affected services) after the update to ensure the change takes effect and verify normal operation.
  • Enable detailed logging and monitor for abnormal exception handling or service interruptions; if problems arise, revert to a known stable image and engage Cisco support immediately.

Generated by OpenCVE AI on October 7, 2026 at 18:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 09 Oct 2026 07:45:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco cisco Nx-os System Software In Aci Mode
Cisco nx-os Software
Cisco unified Computing System Manager
Vendors & Products Cisco
Cisco cisco Nx-os System Software In Aci Mode
Cisco nx-os Software
Cisco unified Computing System Manager

Thu, 08 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 07 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Description As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76458 are related to improper handling of exceptional conditions issues that are grouped under the Common Weakness Enumeration (CWE) CWE-703.
Title Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities
Weaknesses CWE-703
References
Metrics cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}


Subscriptions

Cisco Cisco Nx-os System Software In Aci Mode Nx-os Software Unified Computing System Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-10-08T15:32:15.339Z

Reserved: 2026-08-19T12:02:03.637Z

Link: CVE-2026-76458

cve-icon Vulnrichment

Updated: 2026-10-08T15:32:09.324Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-07T17:16:58.280

Modified: 2026-10-08T20:08:45.857

Link: CVE-2026-76458

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T07:30:17Z

Weaknesses
  • CWE-703

    Improper Check or Handling of Exceptional Conditions