Cisco Advance Notification for Publication of October 7, 2026, Security Advisories

On October 7, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate the vulnerabilities that were disclosed on October 7, 2026, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the advisories. For more information about changes in Cisco PSIRT vulnerability disclosure, see Strengthening the Foundation: A Predictable, Customer-Focused Response to AI-Accelerated Vulnerability Discovery. Cisco NX-OS Software Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco NX-OS Software Security Hardening Release: October 2026 CVE-2026-76455 CVE-2026-76456 CVE-2026-76457 CVE-2026-76459 CVE-2026-76458 CVE-2026-76453 Critical 9.8 Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability CVE-2026-76465 Critical 9.8 Cisco Nexus 3000 and 9000 Series Switches NGOAM Remote Code Execution Vulnerabilities CVE-2026-76485 CVE-2026-76486 CVE-2026-76501 Critical 9.8 Cisco NX-OS Software NX-API Remote Code Execution Vulnerability CVE-2026-76471 Critical 9.8 Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability CVE-2026-20038 Medium 5.8 Cisco NX-OS Software Control Plane Denial of Service Vulnerability CVE-2026-20173 Medium 5.8 Cisco NX-OS Software Python Sandbox Escape Vulnerability CVE-2026-20032 Medium 4.4 Cisco Application Policy Infrastructure Controller Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026 CVE-2026-76499 CVE-2026-76500 CVE-2026-76498 Critical 9.8 Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability CVE-2026-20321 Medium 6.5 Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability CVE-2026-76488 Medium 6.5 Cisco Smart License (Smart Software Manager) On-Prem, Meraki, and Finesse Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco License (Smart Software Manager) On-Prem Security Hardening Release: October 2026 CVE-2026-76480 CVE-2026-76482 CVE-2026-76483 CVE-2026-76484 Critical 10.0 Cisco License (Smart Software Manager) On-Prem Vulnerabilities CVE-2026-76437 CVE-2026-76452 CVE-2026-20328 CVE-2026-76454 Critical 10.0 Cisco Meraki Security Hardening Release: October 2026 CVE-2026-76470 CVE-2026-76472 CVE-2026-76469 CVE-2026-76464 CVE-2026-76467 CVE-2026-76468 CVE-2026-76463 Critical 9.6 Cisco Finesse Server-Side Request Forgery Vulnerability CVE-2026-20362 High 7.2