Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-20010
PUBLISHED
More InfoOfficial Page
Assigner-cisco
Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633
View Known Exploited Vulnerability (KEV) details
Published At-25 Feb, 2026 | 16:18
Updated At-25 Feb, 2026 | 19:05
Rejected At-
▼CVE Numbering Authority (CNA)
Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the LLDP process to restart, which could cause an affected device to reload unexpectedly. This vulnerability is due to improper handling of specific fields in an LLDP frame. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface of an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Note: LLDP is a Layer 2 link protocol. To exploit this vulnerability, an attacker would need to be directly connected to an interface of an affected device, either physically or logically (for example, through a Layer 2 Tunnel configured to transport the LLDP protocol).

Affected Products
Vendor
Cisco Systems, Inc.Cisco
Product
Cisco NX-OS Software
Default Status
unknown
Versions
Affected
  • 10.3(1)
  • 10.3(2)
  • 10.3(3)
  • 10.4(1)
  • 10.3(99w)
  • 10.3(3w)
  • 10.3(99x)
  • 10.3(3o)
  • 10.3(4)
  • 10.3(3p)
  • 10.3(4a)
  • 10.4(2)
  • 10.3(3q)
  • 10.3(3x)
  • 10.3(4g)
  • 10.3(3r)
  • 10.3(4h)
Vendor
Cisco Systems, Inc.Cisco
Product
Cisco NX-OS System Software in ACI Mode
Default Status
unknown
Versions
Affected
  • 16.0(2h)
  • 16.0(2j)
  • 16.0(3d)
  • 16.0(3e)
  • 16.0(4c)
  • 16.0(5h)
  • 16.0(3g)
  • 16.0(5j)
  • 16.0(6c)
  • 16.1(1f)
  • 16.0(7e)
  • 16.0(8e)
  • 16.0(8f)
  • 16.1(2f)
  • 16.1(2g)
  • 16.0(9c)
  • 16.1(3f)
  • 16.0(9d)
  • 16.0(6h)
  • 16.0(8h)
  • 16.1(3g)
Vendor
Cisco Systems, Inc.Cisco
Product
Cisco Unified Computing System (Managed)
Default Status
unknown
Versions
Affected
  • 4.3(4e)
  • 4.3(6b)
  • 4.3(4c)
  • 4.3(4f)
  • 4.3(6d)
  • 4.3(5e)
  • 4.3(4d)
  • 4.3(4b)
  • 4.3(5a)
  • 4.3(5c)
  • 4.3(5d)
  • 4.3(6c)
  • 4.3(6a)
Problem Types
TypeCWE IDDescription
cweCWE-805Buffer Access with Incorrect Length Value
Type: cwe
CWE ID: CWE-805
Description: Buffer Access with Incorrect Length Value
Metrics
VersionBase scoreBase severityVector
3.17.4HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Version: 3.1
Base score: 7.4
Base severity: HIGH
Vector:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k_aci_lldp_dos-NdgRrrA3
N/A
Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n3kn9k_aci_lldp_dos-NdgRrrA3
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found