CVE-2026-20033

The record

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the management interface of an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only the out-of-band (OOB) management interface is affected.

Affected packages

Related vulnerabilities

• CVE-2026-6695 A flaw was found in GIMP. CWE-805
• CVE-2026-53877 An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. CWE-805
• CVE-2026-12549 The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced… CWE-805
• CVE-2026-1767 A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3… CWE-805
• CVE-2026-1766 A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor… CWE-805
• CVE-2026-12087 Socket versions before 2.041 for Perl have an out-of-bounds heap read. CWE-805
• CVE-2026-34002 A flaw was found in the X.Org X server. CWE-805
• CVE-2025-63547 An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a… CWE-805