05 September 2026
Reference: CVE-2026-20212
1. What is being reported?
The vulnerability affects certain Cisco Nexus 9000 switches, where specific network ports are open by default. This allows an attacker who can reach these ports to send harmful commands that the switch might run with the highest system privileges, potentially taking over the device or causing it to crash and restart.
2. What this means in plain English
If your organisation uses these Cisco switches, an attacker could remotely control your network hardware, leading to possible network outages or data breaches. This is a high-risk issue because it does not require the attacker to have any login credentials.
3. Could this affect a small business?
Small businesses or charities that use Cisco Nexus 9000 switches in their network could be affected. If you do not use this specific hardware, or if your network is not accessible from outside your organisation, the risk is likely lower. However, it is important to confirm with your IT provider.
4. What to do now
- Check if your organisation uses Cisco Nexus 9000 Series Switches.
- Ask your IT provider if these switches are running the vulnerable software and if the affected ports (43210 and 43211) are accessible.
- Apply any security updates or patches provided by Cisco as soon as possible.
- Consider restricting access to the affected ports to trusted devices only or isolating the switches from untrusted networks.
5. Ask your IT provider
Can you confirm whether our Cisco Nexus 9000 switches are affected by CVE-2026-20212, and what steps are being taken to secure them?
6. Bottom line
If you use Cisco Nexus 9000 switches, act quickly to check and secure them against this critical vulnerability.
Information based on NVD, CISA KEV, and reputable security reporting.