CVE-2019-1726: Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability

Security readout for executives and security teams

CVE-2019-1726 lets a logged-in local user on affected Cisco NX-OS devices bypass CLI restrictions and reach internal services, such as NX-API. It is not a remote unauthenticated issue, but it can weaken device control boundaries if low-privileged credentials are abused or compromised. Exposure is limited to Cisco NX-OS Software environments where affected versions are deployed and attackers can authenticate locally with valid device credentials. Internet exposure is indirect unless credentials and administrative access paths are compromised. Treat this as a moderate network infrastructure risk. It requires valid credentials, but affected switches can be high-value control points. Prioritize remediation where many users have device access or where credential compromise is plausible. Mitigation focus: Inventory Cisco NX-OS devices and map versions against Cisco's advisory.; Review Cisco's advisory for fixed releases and upgrade guidance.; Restrict CLI access to trusted administrators only..

Prepared

Jun 1, 2026, 04:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.