Cisco Nexus 3000/9000 (health monitoring diagnostics): The health monitoring diagnostics subsystem on Nexus 3000 and

Impact

The health monitoring diagnostics subsystem on Nexus 3000 and 9000 switches in standalone NX-OS mode can be driven into a denial of service by an unauthenticated attacker. The irony is worth noting for operators — the subsystem whose job is to tell you the switch is healthy is itself the thing that takes it down.

Who can reach it

Unauthenticated, remote — traffic reaching the affected diagnostics handling on the switch.

What to do

NX-OS upgrade plus reload per switch, staged across MLAG/ECMP pairs. Restrict management-plane reachability with CoPP in the meantime — a live config change.

References

Related entries

• Confluent Kafka Python client: TLS certificate verification disabled by default toward HashiCorp Vault KMSCVE-2026-15911 · Confluent Kafka Python client (HashiCorp Vault KMS integration)High
• N-able N-central: Authentication bypass using an alternate path or channel on the RMM serverCVE-2026-18556 · N-able N-centralHigh
• Jenkins TICS plugin: attacker-controlled build variables execute arbitrary commands on the build agentCVE-2026-84675 · Jenkins TICS plugin (build environment variable expansion into an OS command)High
• Sigstore cosign (verify-blob / verify-blob-attestation, legacy JSON bundle): SUPPLY CHAIN, VERIFICATION BYPASS: keylessNCVD-2026-056-sigstore-cosign-verify-blob-veri · Sigstore cosign (verify-blob / verify-blob-attestation, legacy JSON bundle)High
• Grafana: Stored XSS via Unified AlertingCVE-2022-31097 · GrafanaHigh
• Linux i915 GVT-g mediated GPU virtualisation (debugfs teardown): Companion to the vGPU debugfs cleanup bug: GVT-gCVE-2023-54098 · Linux i915 GVT-g mediated GPU virtualisation (debugfs teardown)High