A critical vulnerability exists in Cisco NX-OS Software's NX-API feature, identified as CVE-2026-76471. This flaw allows unauthenticated, remote attackers to execute arbitrary code with root privileges or cause a denial of service. The vulnerability stems from inadequate input validation of data sent to the NX-API. Attackers can exploit this by sending specially crafted HTTP requests to the NX-API. Successful exploitation can lead to arbitrary code execution at the root level. It can also trigger process crashes, potentially resulting in device reloads and a denial of service. Cisco has issued software updates to fix this vulnerability. Currently, there are no available workarounds to mitigate this issue. The security impact of this vulnerability is rated as critical. Further details are available in the Cisco Security Advisory.