[NEW] [high] Cisco Nexus: Vulnerability enables execution of arbitrary code with administrator privileges
A remote, anonymous attacker can exploit a vulnerability in Cisco Nexus to execute arbitrary code with administrator privileges.
CSIRTS triage
- What
- A remote anonymous attacker can execute arbitrary code with administrator privileges on Cisco Nexus.
- Who is affected
- Cisco Nexus devices exposed to remote access, particularly untrusted networks.
- Urgency
- High severity; unauthenticated remote code execution with administrative privileges is critical.
- Action
- Apply Cisco security patch for CVE-2026-20212 or isolate affected Nexus devices.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Nexus
Get an email when a new Nexus advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3157
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-20212 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- criticalCVE-2026-20212: A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allo…nvd
- criticalCisco Advance Notification for Publication of September 2, 2026, Security Advisoriescisco-psirt
- criticalCisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerabilitycisco-psirt
More from CERT-Bund (BSI) Security Advisories
- high[NEW] [high] IBM i: Multiple Vulnerabilities2026-09-03
- medium[NEW] [medium] Sonatype Nexus Repository Manager: Multiple Vulnerabilities Enable Denial of Service2026-09-03
- high[NEW] [high] BigBlueButton: Multiple Vulnerabilities2026-09-03
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities2026-09-03
- medium[NEW] [medium] Red Hat Enterprise Linux (libsolv, aardvark-dns): Multiple vulnerabilities2026-09-03