TACERT台灣學術網路危機處理中心

※安全通報資訊

安全通報類型	其它安全通報
發佈日期	2026-10-16
標題	【漏洞預警】Cisco NX-OS Software NX-API 存在3個重大資安漏洞
CVE
BID
影響平台	● MDS 9000 Series Multilayer Switches Cisco NX-OS Software 9.3(含)之前版本、 ● MDS 9000 Series Multilayer Switches Cisco NX-OS Software 9.4版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.3(含)之前版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.4版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.5版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.6版本、 ● Nexus 7000 Series Switches Cisco NX-OS Software 8.3(含)之前版本、 Nexus 7000 Series Switches Cisco NX-OS Software 8.4版本、 ● Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.0(含)之前版本、 ● Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.1版本、 ● Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.2版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software 4.2(含)之前版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software 4.3版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects Cisco UCS Software 6.0版本
說明	發佈編號：TACERT-ANA-2026101604102424 (轉發台灣電腦網路危機處理暨協調中心資安訊息警訊 TWCERTCC-200-202610-00000026) Cisco NX-OS Software開發團隊於內部安全審查期間發現多項安全漏洞，並已完成修補。目前尚未發現有證據顯示這些漏洞遭到積極利用。為協助客戶及時部署安全更新並簡化漏洞揭露流程，Cisco已公開相關漏洞資訊及修補建議。 ● CVE-2026-76453，CVSS：8.8，為不適當處理漏洞。 ● CVE-2026-76455，CVSS：9.8，為存取控制不當漏洞。 ● CVE-2026-76459，CVSS：9.8，為越界寫入漏洞。情資分享等級: WHITE(情資內容為可公開揭露之資訊)
解決方式	[建議措施:] 請更新至以下版本： ● MDS 9000 Series Multilayer Switches Cisco NX-OS Software 9.4(5a)(含)之後版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.3(10)(含)之後版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.4(8)(含)之後版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.5(6)(含)之後版本、 ● Nexus 3000 Series Switches and Nexus 9000 Series Switches in Standalone NX-OS mode Cisco NX-OS Software 10.6(4)(含)之後版本、 ● Nexus 7000 Series Switches Cisco NX-OS Software 8.4(14)(含)之後版本、 ● Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.0(9h)(含)之後版本、 ● Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.1(6g)(含)之後版本、 ● Nexus 9000 Series Fabric Switches in ACI mode Cisco NX-OS Software 16.2(3g)(含)之後版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode 4.3(6j)(含)之後版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Manager Managed Mode 6.0(2e)(含)之後版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode 4.3(6.260049)(含)之後版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode 4.3(6.260059)(含)之後版本、 ● UCS 6300, 6400, 6500, and 6600 Series and 9108 100G Fabric Interconnects UCS Intersight Managed Mode 6.0(2.260080)(含)之後版本 [參考資料:] 1. https://www.twcert.org.tw/tw/cp-169-11290-ae311-1.html
相關資訊連結
相關修正資訊連結