CVEvulnerability

CVE-2026-20097

6.5 MEDIUM Published 2026-04-01 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-04-01
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-20, CWE-787

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user. Cisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.

Affected configurations

• cisco unified computing system 3.1\(1d\) • cisco unified computing system 3.1\(2b\) • cisco unified computing system 3.1\(2c\) • cisco unified computing system 3.1\(2d\) • cisco unified computing system 3.1\(2e\) • cisco unified computing system 3.1\(2g\) • cisco unified computing system 3.1\(2i\) • cisco unified computing system 3.1\(3a\) • cisco unified computing system 3.1\(3b\) • cisco unified computing system 3.1\(3c\) • cisco unified computing system 3.1\(3d\) • cisco unified computing system 3.1\(3g\) • cisco unified computing system 3.1\(3h\) • cisco unified computing system 3.1\(3i\) • cisco unified computing system 3.1\(3j\) • cisco unified computing system 3.1\(3k\) • cisco unified computing system 4.0\(1.240\) • cisco unified computing system 4.0\(1a\) • cisco unified computing system 4.0\(1b\) • cisco unified computing system 4.0\(1c\) • cisco unified computing system 4.0\(1d\) • cisco unified computing system 4.0\(1e\) • cisco unified computing system 4.0\(1g\) • cisco unified computing system 4.0\(1h\) • cisco unified computing system 4.0\(2c\) • cisco unified computing system 4.0\(2d\) • cisco unified computing system 4.0\(2f\) • cisco unified computing system 4.0\(2g\) • cisco unified computing system 4.0\(2h\) • cisco unified computing system 4.0\(2i\) • cisco unified computing system 4.0\(2l\) • cisco unified computing system 4.0\(2n\) • cisco unified computing system 4.0\(2o\) • cisco unified computing system 4.0\(2p\) • cisco unified computing system 4.0\(2q\) • cisco unified computing system 4.0\(2r\) • cisco unified computing system 4.0\(4b\) • cisco unified computing system 4.0\(4c\) • cisco unified computing system 4.0\(4d\) • cisco unified computing system 4.0\(4e\) • cisco unified computing system 4.0\(4f\) • cisco unified computing system 4.0\(4h\) • cisco unified computing system 4.0\(4i\) • cisco unified computing system 4.0\(4k\) • cisco unified computing system 4.0\(4l\) • cisco unified computing system 4.0\(4m\) • cisco unified computing system 4.0\(4n\) • cisco unified computing system 4.1\(1c\) • cisco unified computing system 4.1\(1d\) • cisco unified computing system 4.1\(1f\) • cisco unified computing system 4.1\(1g\) • cisco unified computing system 4.1\(1h\) • cisco unified computing system 4.1\(2a\) • cisco unified computing system 4.1\(2b\) • cisco unified computing system 4.1\(2d\) • cisco unified computing system 4.1\(2e\) • cisco unified computing system 4.1\(2f\) • cisco unified computing system 4.1\(2g\) • cisco unified computing system 4.1\(2h\) • cisco unified computing system 4.1\(2j\) … and 84 more

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-787 Out-of-bounds Write weakness

References