CVEvulnerability

CVE-2026-20094

8.8 HIGH Published 2026-04-01 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-04-01
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Affected configurations

• cisco unified computing system 3.1\(1d\) • cisco unified computing system 3.1\(2b\) • cisco unified computing system 3.1\(2c\) • cisco unified computing system 3.1\(2d\) • cisco unified computing system 3.1\(2e\) • cisco unified computing system 3.1\(2g\) • cisco unified computing system 3.1\(2i\) • cisco unified computing system 3.1\(3a\) • cisco unified computing system 3.1\(3b\) • cisco unified computing system 3.1\(3c\) • cisco unified computing system 3.1\(3d\) • cisco unified computing system 3.1\(3g\) • cisco unified computing system 3.1\(3h\) • cisco unified computing system 3.1\(3i\) • cisco unified computing system 3.1\(3j\) • cisco unified computing system 3.1\(3k\) • cisco unified computing system 4.0\(1.240\) • cisco unified computing system 4.0\(1a\) • cisco unified computing system 4.0\(1b\) • cisco unified computing system 4.0\(1c\) • cisco unified computing system 4.0\(1d\) • cisco unified computing system 4.0\(1e\) • cisco unified computing system 4.0\(1g\) • cisco unified computing system 4.0\(1h\) • cisco unified computing system 4.0\(2c\) • cisco unified computing system 4.0\(2d\) • cisco unified computing system 4.0\(2f\) • cisco unified computing system 4.0\(2g\) • cisco unified computing system 4.0\(2h\) • cisco unified computing system 4.0\(2i\) • cisco unified computing system 4.0\(2k\) • cisco unified computing system 4.0\(2l\) • cisco unified computing system 4.0\(2m\) • cisco unified computing system 4.0\(2n\) • cisco unified computing system 4.0\(2o\) • cisco unified computing system 4.0\(2p\) • cisco unified computing system 4.0\(2q\) • cisco unified computing system 4.0\(2r\) • cisco unified computing system 4.0\(4b\) • cisco unified computing system 4.0\(4c\) • cisco unified computing system 4.0\(4d\) • cisco unified computing system 4.0\(4e\) • cisco unified computing system 4.0\(4f\) • cisco unified computing system 4.0\(4h\) • cisco unified computing system 4.0\(4i\) • cisco unified computing system 4.0\(4j\) • cisco unified computing system 4.0\(4k\) • cisco unified computing system 4.0\(4l\) • cisco unified computing system 4.0\(4m\) • cisco unified computing system 4.0\(4n\) • cisco unified computing system 4.1\(1c\) • cisco unified computing system 4.1\(1d\) • cisco unified computing system 4.1\(1f\) • cisco unified computing system 4.1\(1g\) • cisco unified computing system 4.1\(1h\) • cisco unified computing system 4.1\(2a\) • cisco unified computing system 4.1\(2b\) • cisco unified computing system 4.1\(2d\) • cisco unified computing system 4.1\(2e\) • cisco unified computing system 4.1\(2f\) … and 132 more

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References