Skip to content
fr Sign in
8.8 High

CVE-2026-20094 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with…

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Affected products and versions

Product Affected versions Fixed in
Cisco Unified Computing System (Standalone) Versions not published
Cisco Unified Computing System E-Series Software (UCSE) 4.15.2 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 4.12 4.12.1 → 4.12.2 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 4.11.1 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 4.02 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 4.00 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 3.2 3.2.1 → 3.2.16.1 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 3.1 3.1.0 → 3.1.5 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 3.0 3.0.1 → 3.0.2 No fix stated
Show the 5 other branches
Product Affected versions Fixed in
Cisco Unified Computing System E-Series Software (UCSE) 2.4 2.4.0 → 2.4.2 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.3 2.3.1 → 2.3.5 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.2 2.2.1 → 2.2.2 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.1.0 No fix stated
Cisco Unified Computing System E-Series Software (UCSE) 2.0.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Unified Computing System (Standalone)

The 23 CVEs of Cisco Unified Computing System (Standalone) →
CVE-2026-20293 A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and… 7.1 High CVE-2026-20288 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker… 6.5 Medium CVE-2026-20200 A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with… 8.8 High CVE-2026-20198 A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an… 4.8 Medium
Track this CVE