[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:critical-cisco-nexus-9000-flaw-lets-unauthenticated-remote-attackers-run-code-as-mtm0lfop":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":13,"action_required":16,"article_ids":17,"ioc_summary":19,"source_urls":20,"status":22,"expires_at":23,"created_at":24,"updated_at":25,"articles":26},"4d3ec328-3473-478d-a325-4c1f06873375","Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root","critical-cisco-nexus-9000-flaw-lets-unauthenticated-remote-attackers-run-code-as-mtm0lfop","Cisco released patches for CVE-2026-20212, a critical unauthenticated remote code execution vulnerability in Nexus 9000 switches (10 Silicon One-based models). Attackers can exploit this via TCP ports 43210 and 43211 to execute commands as root. If you run affected Nexus 9000 hardware, this is immediately exploitable.","critical","advisory",[12],"CVE-2026-20212",[14,15],"Nexus 9000","Cisco","Identify all Nexus 9000 Silicon One-based switches in your environment and apply Cisco patches immediately. Monitor TCP 43210 and 43211 for suspicious traffic. Check logs for any connections to these ports from untrusted sources.",[18],"da0cc8e4-dc08-4636-9830-7ac353118c2b",null,[21],"https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fcritical-cisco-nexus-9000-flaw-lets.html","active","2026-09-05T21:05:47.886+00:00","2026-09-03T21:05:53.902143+00:00","2026-09-03T21:07:09.734469+00:00",[27],{"id":18,"title":6,"url":21}]