Summary

• Cisco released its semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication on February 25, 2026. In direct response to customer feedback, Cisco releases bundles of Cisco FXOS and NX-OS Software Security Advisories on the fourth Wednesday of the month in February and August of each calendar year.

  The February 25, 2026, release of the Cisco FXOS and NX-OS Software Security Advisory Bundled Publication includes eight Cisco Security Advisories that describe eight vulnerabilities in Cisco NX-OS Software. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score	Affected Software	Affected Hardware Platforms
  Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability	CVE-2026-20048	High	7.7	NX-OS Software in ACI Mode	Cisco Nexus 9000 Series Switches
  Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability	CVE-2026-20051	High	7.4	NX-OS Software	Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches
  Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial of Service Vulnerability	CVE-2026-20033	High	7.4	NX-OS Software in ACI Mode	Cisco Nexus 9000 Series Switches
  Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability	CVE-2026-20010	High	7.4	NX-OS Software, NX-OS Software in ACI Mode, UCS Software (Managed)	Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches, Cisco UCS 9100 Series Fabric Interconnects
  Cisco FXOS and UCS Manager Software Command Injection Vulnerability	CVE-2026-20099	Medium	6.7	FXOS Software, UCS Software (Managed)	Cisco Firepower 2100 Series, Cisco Firepower 4100 Series, Cisco Firepower 9000 Series, Cisco UCS 6300 Series Fabric Interconnects, Cisco UCS 6400 Series Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, Cisco UCS 9100 Series Fabric Interconnects
  Cisco UCS Manager Software Command Injection Vulnerability	CVE-2026-20036	Medium	6.5	UCS Software (Managed)	Cisco UCS 6300 Series Fabric Interconnects, Cisco UCS 6400 Series Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects
  Cisco FXOS and UCS Manager Software Stored Cross-Site Scripting Vulnerability	CVE-2026-20091	Medium	4.8	FXOS Software, UCS Software (Managed)	Cisco Firepower 2100 Series, Cisco Firepower 4100 Series, Cisco Firepower 9000 Series, Cisco UCS 6300 Series Fabric Interconnects, Cisco UCS 6400 Series Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, Cisco UCS 9100 Series Fabric Interconnects
  Cisco UCS Manager Software Privilege Escalation Vulnerability	CVE-2026-20037	Medium	4.4	UCS Software (Managed)	Cisco UCS 6400 Series Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, Cisco UCS 9100 Series Fabric Interconnects

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A