> TritonInfoSec News
Home / Sep 04, 2026 / Story
0
#2 The Hacker News general September 03, 2026 at 15:52 UTC

Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root

By [email protected] (The Hacker News)

AI Summary

Cisco patched CVE-2026-20212 (CVSS 9.8), a critical unauthenticated RCE flaw in 10 Silicon One-based Nexus 9000 switches, alongside an IOS XR hardening release covering 7 CVEs — two rated 9.8 — with no available workaround for any IOS XR version. The Nexus vulnerability allows a remote attacker to execute arbitrary code as root without authentication. Network defenders running affected Nexus 9000 or IOS XR gear should apply patches immediately given the CVSS scores and lack of mitigations.

Read full article → https://thehackernews.com/2026/09/critical-cisco-n…

Relevance score: 91.0/100

# More from September 04

  1. 1
    CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners The Hacker News
  2. 3
    Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member's iPhone The Hacker News
  3. 4
    Sality botnet infrastructure dismantled in joint global takedown BleepingComputer
  4. 5
    Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data The Hacker News
  5. 6
    Critical Elementor Pro flaw exploited to take over WordPress sites BleepingComputer
  6. 7
    OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold SecurityWeek
  7. 8
    Hackers exploit critical JFrog Artifactory flaw to forge admin tokens BleepingComputer
  8. 9
    153 Million Driver License Images Offered on Dark Web SecurityWeek
  9. 10
    BGP hijack infecting networks caused by a comedy of errors that’s not funny at all Ars Technica Security