Cyb3rius
@cyb3rius
· Sep 3
Cisco Nexus 9000 root flaw: who is affected and is it patched?Yes, Cisco released fixes for a critical flaw in 10 Silicon One-based Nexus 9000 switches that lets unauthenticated remote attackers execute code as root.What happened: Cisco disclosed and patched a critical vulnerability in the Nexus 9000 line, tied to its NX-OS software, allowing remote code execution without authentication. The advisory was published alongside related patches, warning that exploitation could lead to full device takeover.Key numbers: 10 affected Nexus 9000 switch models based on Silicon OneCVSS severity score of 9.8 (critical)No CVE ID yet assigned in the public advisory, but fixes released in March 2026Why it matters: These switches sit in data center cores, so a root-level compromise could let attackers reroute traffic, steal data, or pivot deep into enterprise networks.Bottom line: If you run Nexus 9000 Silicon One hardware, assume exposure until you confirm the patch is applied.
0