PT-2026-21946 · Cisco · Cisco Nx-Os+1

Published 2026-02-25 · Updated 2026-02-27 · CVE-2026-20010

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software (affected versions not specified)

Description A flaw exists in the Link Layer Discovery Protocol (LLDP) feature that could allow a nearby attacker to restart the LLDP process, potentially causing the device to reload unexpectedly. This is due to improper handling of specific fields within an LLDP frame. An attacker can exploit this by sending a specially crafted LLDP packet to an interface on the affected device, leading to a denial of service (DoS) condition. LLDP is a Layer 2 link protocol, requiring the attacker to be directly connected to the device, either physically or logically, to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-805

Related Identifiers

CVE-2026-20010

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k_aci_lldp_dos-NdgRrrA3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20010 · Security Note
• https://twitter.com/infoflowcloud/status/2027100537410158914 · Twitter Post
• https://t.me/cveNotify/153486 · Telegram Post
• https://twitter.com/CVEnew/status/2027099324690350221 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2026801482364805527 · Twitter Post