{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2026-20037", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-20037", "idYear": 2026, "status": "PUBLISHED", "publishedAt": "2026-02-25T16:24:09.650Z", "updatedAt": "2026-02-25T19:05:48.855Z", "importedAt": "2026-10-24T01:57:55.771Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "Cisco UCS Manager File Write Vulnerability", "summary": "A vulnerability in the NX-OS CLI privilege levels of Cisco UCS Manager Software could allow an authenticated, local attacker with read-only privileges to modify files and perform unauthorized actions on an affected system.\r\n \r\nThis vulnerability exists because unnecessary privileges are given to the user. An attacker could exploit this vulnerability by authenticating to a device as a read-only user and connecting to the NX-OS CLI. A successful exploit could allow the attacker to create or overwrite files in the file system or perform limited privileged actions on an affected device.   ", "affected": [ { "vendor": "Cisco", "product": "Cisco Unified Computing System (Managed)", "defaultStatus": "unknown", "versions": [ { "version": "4.0(4c)", "status": "affected" }, { "version": "4.0(2b)", "status": "affected" }, { "version": "4.1(2a)", "status": "affected" }, { "version": "4.0(1a)", "status": "affected" }, { "version": "4.0(2a)", "status": "affected" }, { "version": "4.0(1b)", "status": "affected" }, { "version": "4.1(1c)", "status": "affected" }, { "version": "4.0(4a)", "status": "affected" }, { "version": "4.0(4b)", "status": "affected" }, { "version": "4.0(2e)", "status": "affected" }, { "version": "4.1(1a)", "status": "affected" }, { "version": "4.0(4d)", "status": "affected" }, { "version": "4.0(4h)", "status": "affected" }, { "version": "4.0(4g)", "status": "affected" }, { "version": "4.0(1d)", "status": "affected" }, { "version": "4.1(1e)", "status": "affected" }, { "version": "4.0(4f)", "status": "affected" }, { "version": "4.0(4e)", "status": "affected" }, { "version": "4.0(4i)", "status": "affected" }, { "version": "4.1(1d)", "status": "affected" }, { "version": "4.0(2d)", "status": "affected" }, { "version": "4.1(1b)", "status": "affected" }, { "version": "4.0(1c)", "status": "affected" }, { "version": "4.1(2b)", "status": "affected" }, { "version": "4.0(4k)", "status": "affected" }, { "version": "4.1(3a)", "status": "affected" }, { "version": "4.1(3b)", "status": "affected" }, { "version": "4.1(2c)", "status": "affected" }, { "version": "4.0(4l)", "status": "affected" }, { "version": "4.1(4a)", "status": "affected" }, { "version": "4.1(3c)", "status": "affected" }, { "version": "4.1(3d)", "status": "affected" }, { "version": "4.2(1c)", "status": "affected" }, { "version": "4.2(1d)", "status": "affected" }, { "version": "4.0(4m)", "status": "affected" }, { "version": "4.1(3e)", "status": "affected" }, { "version": "4.2(1f)", "status": "affected" }, { "version": "4.1(3f)", "status": "affected" }, { "version": "4.2(1i)", "status": "affected" }, { "version": "4.1(3h)", "status": "affected" }, { "version": "4.2(1k)", "status": "affected" }, { "version": "4.2(1l)", "status": "affected" }, { "version": "4.0(4n)", "status": "affected" }, { "version": "4.2(1m)", "status": "affected" }, { "version": "4.1(3i)", "status": "affected" }, { "version": "4.2(2a)", "status": "affected" }, { "version": "4.2(1n)", "status": "affected" }, { "version": "4.1(3j)", "status": "affected" }, { "version": "4.2(2c)", "status": "affected" }, { "version": "4.2(2d)", "status": "affected" }, { "version": "4.2(3b)", "status": "affected" }, { "version": "4.1(3k)", "status": "affected" }, { "version": "4.0(4o)", "status": "affected" }, { "version": "4.2(2e)", "status": "affected" }, { "version": "4.2(3d)", "status": "affected" }, { "version": "4.2(3e)", "status": "affected" }, { "version": "4.2(3g)", "status": "affected" }, { "version": "4.1(3l)", "status": "affected" }, { "version": "4.3(2b)", "status": "affected" }, { "version": "4.2(3h)", "status": "affected" }, { "version": "4.2(3i)", "status": "affected" }, { "version": "4.3(2c)", "status": "affected" }, { "version": "4.1(3m)", "status": "affected" }, { "version": "4.3(2e)", "status": "affected" }, { "version": "4.3(3a)", "status": "affected" }, { "version": "4.2(3j)", "status": "affected" }, { "version": "4.3(3c)", "status": "affected" }, { "version": "4.3(4a)", "status": "affected" }, { "version": "4.2(3k)", "status": "affected" }, { "version": "4.3(4b)", "status": "affected" }, { "version": "4.3(4c)", "status": "affected" }, { "version": "4.2(3l)", "status": "affected" }, { "version": "4.3(4d)", "status": "affected" }, { "version": "4.3(2f)", "status": "affected" }, { "version": "4.2(3m)", "status": "affected" }, { "version": "4.3(5a)", "status": "affected" }, { "version": "4.3(4e)", "status": "affected" }, { "version": "4.1(3n)", "status": "affected" }, { "version": "4.3(4f)", "status": "affected" }, { "version": "4.2(3n)", "status": "affected" }, { "version": "4.3(5c)", "status": "affected" }, { "version": "4.2(3o)", "status": "affected" }, { "version": "4.3(5d)", "status": "affected" }, { "version": "4.3(6a)", "status": "affected" }, { "version": "4.3(6b)", "status": "affected" }, { "version": "4.3(5e)", "status": "affected" }, { "version": "4.3(6c)", "status": "affected" }, { "version": "4.2(3p)", "status": "affected" }, { "version": "4.3(6d)", "status": "affected" }, { "version": "4.3(6e)", "status": "affected" } ] } ] } } }