Skip to content
fr Sign in
6.5 Medium

CVE-2026-20036 A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an…

Description

A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative privileges to execute arbitrary commands on the underlying operating system of an affected device.    This vulnerability is due to insufficient input validation of command arguments that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of an affected device with root-level privileges.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System (Managed) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System (Managed)

The 41 CVEs of Cisco Unified Computing System (Managed) →
CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 8.6 High CVE-2026-76459 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 9.8 Critical CVE-2026-76471 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute… 9.8 Critical CVE-2026-76455 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has… 9.8 Critical
Track this CVE