CVE-2026-20094 in Unified Computing System

Sumário (Inglês)

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsável

cisco

Reservar

08/10/2025

Divulgação

01/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354716	Cisco Unified Computing System Web-based Management Elevação de Privilégios	77	Não definido	Correção oficial	CVE-2026-20094

Fontes

• MITRE
• NVD
• CVE Details