CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-76465 — A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) fea...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validati

Analysis

A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation when an affected device is processing an MPLS echo-request packet. An attacker could exploit this vulnerability by sending a crafted MPLS echo-request to an IP address on an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges and could cause process crashes, which could result in a device reload and a DoS condition. CVSS Score: 9.8. Published: 2026-10-07T17:16:59.350.

Indicators of Compromise (1)

CVE (1)
CVE-2026-76465
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 7, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Suspected cyber incident blocks Parkview Health patient portal in Indiana and Ohio

DysruptionHub reports: The health system disabled its network after suspicious activity, leaving MyChart and doctor searches unavailable and directing urgent medical needs to phone calls or walk-in clinics. A suspected cyber incident left Parkview Health patients without MyChart and online doctor searches Monday after the Indiana-based health system disabled its network in response to suspicious..

DataBreaches.net
MEDIUMVulnerability

Google Cloud outage disrupts multiple bank sites

HSBC, Revolut, Lloyds and Bank of Scotland are among some of the banks reported to have been affected by a major outage at Google Cloud

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-113389 — A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affecte...

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor explains: "2960 1.5.1.7 has correcte

CVE-2026-113389
NIST NVD