Critical Cisco Nexus 9000 Flaw Allows Remote Root Code Execution

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7 umbrella CVEs, 2 of which are rated 9.8, with no workaround for any IOS XR version. The Nexus

Cisco Nexus 9000 Silicon One RCE Exposes AI Data Center Fabric to Root Compromise

On September 2, 2026, Cisco PSIRT disclosed CVE-2026-20212, a critical vulnerability affecting Cisco Nexus 9000 switches equipped with Silicon One ASICs. With a CVSS score of 9.8, this flaw allows for unauthenticated root remote code execution (RCE) via TCP ports 43210 and 43211 in the default L3 VRF. While Cisco PSIRT reported no known exploitation […]

Critical Cisco Nexus 9000 Flaw Allows Remote Root Code Execution

Cisco disclosed a critical Nexus 9000 flaw that can allow unauthenticated remote attackers to execute code as root on affected switches. Cisco patches CVE-2026-20212, a critical Nexus 9000 flaw that can let unauthenticated remote attackers execute code as root.