SecBoard
Zurück zur CVE-Übersicht

CVE-2026-76457

HIGH(8.6)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Risk Signal Score22/100 — NIEDRIG
  • CVSS 8.6 — Hoch

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.3%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

8.6

Technische Schwere

Beschreibung

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76457 are related to out-of-bounds read issues that are grouped under the Common Weakness Enumeration (CWE) CWE-125.

Erkennung & Indikatoren

Ausnutzung

In den geprüften Quellen nicht genannt

Threat-Hunting-Queries

Sentinel/Defender KQL

DeviceProcessEvents
| where InitiatingProcessCommandLine contains "NX-OS" and ProcessCommandLine contains "out-of-bounds read"

Splunk SPL

index=* sourcetype="cisco:nxos" "out-of-bounds read"

Sigma

title: Cisco NX-OS Out-of-Bounds Read
logsource:
  product: cisco
  service: nxos
detection:
  keywords:
    - 'out-of-bounds read'
  condition: keywords

Elastic ES|QL

from cisco.nxos.log
| where message : "out-of-bounds read"

SecBoard-generated · behavioral · requires customization — Von SecBoard erzeugt und nicht in einer Zielumgebung validiert. Vor dem Einsatz an die eigene Protokollierung anpassen.

Referenzen