Vulnerability in Cisco Nx-os Software
CVE-2026-20010
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly…
EPSS: 0.000 (5.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Nx-os Software — versions 10.3(1), 10.3(2), 10.3(3)
- Cisco Nx-os System Software In Aci Mode — versions 16.0(2h), 16.0(2j), 16.0(3d)
- Cisco Unified Computing System (Managed) — versions 4.3(4e), 4.3(6b), 4.3(4c)
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-20010?
- CVE-2026-20010 is a high-severity vulnerability in Cisco Nx-os Software, classified under Buffer Access with Incorrect Length Value. CVSS score: 7.4/10. Published 2026-02-25.
- How severe is CVE-2026-20010?
- High severity. CVSS v3 base score is 7.4 out of 10.