{"id":"CVE-2026-76456","published":"2026-10-07T17:16:57.770","lastModified":"2026-10-08T20:08:45.857","description":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76456 are related to improper input validation of special elements used in a command issue that are grouped under the Common Weakness Enumeration (CWE) CWE-20.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cwes":["CWE-20"],"vendors":[],"products":[],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-nxosw1-cWzSbtR","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw involves improper input validation, allowing special command elements to be misinterpreted, which could lead to unauthorized access or system compromise.","exploitability":"Exploitation requires specific command input and is moderately difficult, with preconditions including access to the affected command interface.","blast_radius":"If exploited, the impact is high, potentially leading to system compromise or data loss.","remediation":"Upgrade to the fixed version 2026.76456.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["input-validation","command-injection","system-compromise"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:44:44.707Z"}}