CVE-2026-20212
A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HArticles liés
VulnérabilitésCisco : nouvelles vulnérabilités dans Secure Email, IOS XR, les switches Nexus 9000 et les téléphones IP
Cisco corrige des failles critiques du 2 septembre 2026 : Secure Email S/MIME, IOS XR, Nexus 9000 et IP, avec risques RCE, root et DoS.
VulnérabilitésCisco Nexus 9000 : une faille critique permet l’exécution de code à distance avec les privilèges root
Faille critique CVE-2026-20212 sur Cisco Nexus 9000 Silicon One : exécution de code root à distance via TCP 43210/43211. Modèles concernés et correctif.
This product uses the NVD API but is not endorsed or certified by the NVD.