CVE-2026-20212

The record

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 (L3) virtual routing and forwarding (VRF). A successful exploit could allow the attacker to connect to an affected device and send crafted input that could be executed as code with root privileges. The exploitation of this vulnerability could also cause the S1HAL process to crash, which could cause the device to reload.

Affected packages

Related vulnerabilities

• CVE-2026-75021 fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the… CWE-1327
• CVE-2026-72924 GitHub CLI (gh) is GitHub's official command line tool. CWE-1327
• CVE-2026-16713 IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote… CWE-1327
• CVE-2026-16503 Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that… CWE-1327
• CVE-2026-55641 9Router is an AI router & token saver. CWE-1327
• CVE-2026-0481 Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could… CWE-1327
• CVE-2026-42503 gopls by default communicates via pipe. CWE-1327
• GHSA-525j-hqq2-66r4 OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 CWE-1327