CVE-2026-20094

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Apr 1, 2026
Source updated: Apr 22, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco Unified Computing System (Standalone)

Vendor: Cisco
Product: Cisco Unified Computing System (Standalone)
Platforms: Unknown
Default status: unknown

Cisco Unified Computing System (Standalone) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.0(2g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(2i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(1d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(1c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2l)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1.240)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(1d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(2d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3j)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(1f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4j)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2m)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(2g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(2c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(2e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(1b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(2b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4l)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(1g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2n)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(1h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1(3k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2o)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4m)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2p)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(4n)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2q)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.0(2r)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2j)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(2a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(2f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(2g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3l)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3d)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(1.230097)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1b)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1j)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1f)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1a)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1c)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(1g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(1.230124)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2l)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3e)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(1.230138)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3g)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.230207)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3h)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3i)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.230270)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3m)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(2m)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240002)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(3.240022)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3j)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.1(3n)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240009)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(3.240041)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3k)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(3.240043)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.240142)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240037)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240053)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.240152)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3l)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240077)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.242028)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.241063)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.242038)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3m)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240090)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(5.240021)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.240107)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.242066)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3n)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(5.250001)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3o)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.250016)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.250021)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(5.250030)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.250022)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250039)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250040)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(5.250033)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250044)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250053)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.250037)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.250045)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.252001)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.252002)	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.0(1.250127)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.2(3p)	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.0(1.250131)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250101)	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.0(1.250174)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250117)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(5.250043)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(5.250045)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.250060)	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.0(1.250130)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(4.241014)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(2.250063)	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.0(1.250192)	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.3(6.260003)	`affected`	Unavailable	Unavailable	Unavailable	None listed
6.0(1.250194)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Cisco Unified Computing System E-Series Software (UCSE)

Vendor: Cisco
Product: Cisco Unified Computing System E-Series Software (UCSE)
Platforms: Unknown
Default status: unknown

Cisco Unified Computing System E-Series Software (UCSE) · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.2.7	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.10	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.4.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.11.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.8	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.0.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.1.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.2.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.0.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.3.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.3.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.2.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1.4	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.4.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.3.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.3.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.4.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.1.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
2.0.0	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.11.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.11.5	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.12.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.13.6	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.14	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.11.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.15	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.12.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.15.3	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.12.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
3.2.16.1	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.00	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.15.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
4.02	`affected`	Unavailable	Unavailable	Unavailable	None listed