https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:20:17 +0000 https://vulnerability.circl.lu/sighting/dc906c1d-f841-4346-9657-d53288d837b5/export {"uuid": "dc906c1d-f841-4346-9657-d53288d837b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://infosec.exchange/ap/users/117354334421158714/statuses/117403108309221215", "content": "Cisco October advisory: 18 CVEs, 7 critical, no workarounds for any of them.\nNX-OS NGOAM: CVE-2026-76485/76486/76501 \u2014 all CVSS 9.8, unauthenticated root RCE via crafted IP packets on Nexus 3000/9000. Requires NGOAM enabled (with SRv6 or NV Overlay depending on the CVE).\nCheck: show feature | include ngoamIf unused: no feature ngoam\nLicense On-Prem: CVE-2026-76482 (CVSS 10.0, signature verification bypass), CVE-2026-76480 (9.8, missing auth), CVE-2026-20328 (9.1, unauth admin password reset), CVE-2026-76454 (9.1, unauth file write). Fixed: 10-202609.\nNotable: Cisco credited AI models in vulnerability discovery. First time I've seen that in an advisory.\nNo active exploits. Patch the window.\nhttps://threataft.com/articles/cisco-october-2026-mega-roundup-ngoam-license-on-prem\n#infosec #cisco #nxos #patchnow #cve", "creation_timestamp": "2026-10-08T04:53:43.243033Z"} {"uuid": "dc906c1d-f841-4346-9657-d53288d837b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://infosec.exchange/ap/users/117354334421158714/statuses/117403108309221215", "content": "Cisco October advisory: 18 CVEs, 7 critical, no workarounds for any of them.\nNX-OS NGOAM: CVE-2026-76485/76486/76501 \u2014 all CVSS 9.8, unauthenticated root RCE via crafted IP packets on Nexus 3000/9000. Requires NGOAM enabled (with SRv6 or NV Overlay depending on the CVE).\nCheck: show feature | include ngoamIf unused: no feature ngoam\nLicense On-Prem: CVE-2026-76482 (CVSS 10.0, signature verification bypass), CVE-2026-76480 (9.8, missing auth), CVE-2026-20328 (9.1, unauth admin password reset), CVE-2026-76454 (9.1, unauth file write). Fixed: 10-202609.\nNotable: Cisco credited AI models in vulnerability discovery. First time I've seen that in an advisory.\nNo active exploits. Patch the window.\nhttps://threataft.com/articles/cisco-october-2026-mega-roundup-ngoam-license-on-prem\n#infosec #cisco #nxos #patchnow #cve", "creation_timestamp": "2026-10-08T04:53:43.243033Z"} https://vulnerability.circl.lu/sighting/dc906c1d-f841-4346-9657-d53288d837b5/export Thu, 08 Oct 2026 04:53:43 +0000 https://vulnerability.circl.lu/sighting/19f27e43-8b50-4b08-88c3-5eeb51864a00/export {"uuid": "19f27e43-8b50-4b08-88c3-5eeb51864a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdgn4adhv2l", "content": "CVE-2026-76485 - cisco nx-os software\nCisco Nexus 3000 and 9000 series switches running NX\u2011OS can be tricked into running unwanted code or rebooting if the VXLAN OAM feature is turned on. An attacker can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-10-08T02:40:05.183297Z"} {"uuid": "19f27e43-8b50-4b08-88c3-5eeb51864a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdgn4adhv2l", "content": "CVE-2026-76485 - cisco nx-os software\nCisco Nexus 3000 and 9000 series switches running NX\u2011OS can be tricked into running unwanted code or rebooting if the VXLAN OAM feature is turned on. An attacker can send specially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-10-08T02:40:05.183297Z"} https://vulnerability.circl.lu/sighting/19f27e43-8b50-4b08-88c3-5eeb51864a00/export Thu, 08 Oct 2026 02:40:05 +0000 https://vulnerability.circl.lu/sighting/139ff23f-aab7-4a6e-b07c-8fa8076a5c99/export {"uuid": "139ff23f-aab7-4a6e-b07c-8fa8076a5c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxdcqmhppc2j", "content": "Cisco NX-OS NGOAM CRITICAL vuln (CVE-2026-76485): Remote unauthenticated attackers can execute code or cause DoS. Disable NGOAM if not required. Patch status pending. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisc...", "creation_timestamp": "2026-10-08T01:30:28.573253Z"} {"uuid": "139ff23f-aab7-4a6e-b07c-8fa8076a5c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxdcqmhppc2j", "content": "Cisco NX-OS NGOAM CRITICAL vuln (CVE-2026-76485): Remote unauthenticated attackers can execute code or cause DoS. Disable NGOAM if not required. Patch status pending. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisc...", "creation_timestamp": "2026-10-08T01:30:28.573253Z"} https://vulnerability.circl.lu/sighting/139ff23f-aab7-4a6e-b07c-8fa8076a5c99/export Thu, 08 Oct 2026 01:30:28 +0000 https://vulnerability.circl.lu/sighting/fcaaa606-5456-453f-9389-3c0c8ec92c18/export {"uuid": "fcaaa606-5456-453f-9389-3c0c8ec92c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117402699371323176", "content": "CVE-2026-76485: CRITICAL (CVSS 9.8) vulnerability in Cisco NX-OS NGOAM allows remote code execution or DoS via crafted packets. Disable NGOAM if unused. Awaiting official patch. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisco-nx-os-41bf2bad6a99d754 #OffSeq #Cisco #CVE202676485 #Infosec", "creation_timestamp": "2026-10-08T01:30:25.773914Z"} {"uuid": "fcaaa606-5456-453f-9389-3c0c8ec92c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117402699371323176", "content": "CVE-2026-76485: CRITICAL (CVSS 9.8) vulnerability in Cisco NX-OS NGOAM allows remote code execution or DoS via crafted packets. Disable NGOAM if unused. Awaiting official patch. Details: https://radar.offseq.com/threat/a-vulnerability-in-the-vxlan-operation-administration-and-maintenance-oam-feature-of-cisco-nx-os-41bf2bad6a99d754 #OffSeq #Cisco #CVE202676485 #Infosec", "creation_timestamp": "2026-10-08T01:30:25.773914Z"} https://vulnerability.circl.lu/sighting/fcaaa606-5456-453f-9389-3c0c8ec92c18/export Thu, 08 Oct 2026 01:30:25 +0000 https://vulnerability.circl.lu/sighting/bfdd5660-341f-4bbc-81c3-31785ab5b888/export {"uuid": "bfdd5660-341f-4bbc-81c3-31785ab5b888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxck45sedp27", "content": "\ud83d\udea8 CVE-2026-76485 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Softwa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76485\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T18:09:31.320200Z"} {"uuid": "bfdd5660-341f-4bbc-81c3-31785ab5b888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxck45sedp27", "content": "\ud83d\udea8 CVE-2026-76485 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Softwa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76485\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T18:09:31.320200Z"} https://vulnerability.circl.lu/sighting/bfdd5660-341f-4bbc-81c3-31785ab5b888/export Wed, 07 Oct 2026 18:09:31 +0000 https://vulnerability.circl.lu/sighting/f89df6c6-166e-4b58-b26c-720ebb9d2f9a/export {"uuid": "f89df6c6-166e-4b58-b26c-720ebb9d2f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxchif6yun2g", "content": "\ud83d\udd34 CVE-2026-76485 - Critical (9.8)\n\nA vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76485/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-07T17:22:41.201912Z"} {"uuid": "f89df6c6-166e-4b58-b26c-720ebb9d2f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxchif6yun2g", "content": "\ud83d\udd34 CVE-2026-76485 - Critical (9.8)\n\nA vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-76485/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-07T17:22:41.201912Z"} https://vulnerability.circl.lu/sighting/f89df6c6-166e-4b58-b26c-720ebb9d2f9a/export Wed, 07 Oct 2026 17:22:41 +0000 https://vulnerability.circl.lu/sighting/23c91007-274b-49d0-8f13-2a9c28c1d01d/export {"uuid": "23c91007-274b-49d0-8f13-2a9c28c1d01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxchalbddw2p", "content": "Four critical Cisco Nexus vulnerabilities, including CVE-2026-76485 and CVE-2026-76465 (CVSS 9.8), allow root RCE on NX-OS switches. Patch now.\n\n#Cisco #Nexus #NXOS #CVE202676485 #CVE202676465 #RCE #NetworkSecurity #Vulnerability", "creation_timestamp": "2026-10-07T17:18:19.379286Z"} {"uuid": "23c91007-274b-49d0-8f13-2a9c28c1d01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76485", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxchalbddw2p", "content": "Four critical Cisco Nexus vulnerabilities, including CVE-2026-76485 and CVE-2026-76465 (CVSS 9.8), allow root RCE on NX-OS switches. Patch now.\n\n#Cisco #Nexus #NXOS #CVE202676485 #CVE202676465 #RCE #NetworkSecurity #Vulnerability", "creation_timestamp": "2026-10-07T17:18:19.379286Z"} https://vulnerability.circl.lu/sighting/23c91007-274b-49d0-8f13-2a9c28c1d01d/export Wed, 07 Oct 2026 17:18:19 +0000