Cisco NX-OS Software's Next Generation OAM (NGOAM) feature contains multiple critical vulnerabilities. These vulnerabilities allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service. The root cause is improper input validation of IP traffic when NGOAM is enabled on an affected device. An attacker can exploit these by sending specially crafted packets to an IP interface. Successful exploitation can lead to arbitrary code execution with root privileges. It can also cause process crashes, resulting in device reloads and a denial of service. Specific feature requirements for exploitation vary per vulnerability. Cisco has released software updates to address these issues. Currently, no workarounds are available. This advisory is part of a larger group of security advisories. The security impact rating for these vulnerabilities is critical. Three CVEs are associated with these vulnerabilities: CVE-2026-76485, CVE-2026-76486, and CVE-2026-76501.