Critical Vulnerability in Cisco Nexus 9000 Series Switches Exposes Network Devices to Remote Attacks

Cisco has disclosed a critical vulnerability in its Nexus 9000 Series Switches that allows remote attackers to execute malicious code with root privileges.

The flaw, tracked as CVE-2026-20212, affects Nexus 9000 models that use a Silicon One ASIC and has received a CVSS score of 9.8 out of 10.

An attacker can exploit the vulnerability by connecting to an exposed switch and sending specially crafted input, which would be executed as code with root-level privileges.