CVE-2026-20097
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco Integrated Management Controller Remote Code Execution Vulnerability
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user. Cisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Unified Computing System (Standalone)
- Vendor
- Cisco
- Product
- Cisco Unified Computing System (Standalone)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.0(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1.240) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(1b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(1h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.1(3k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(4n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2q) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.0(2r) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2k) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(2g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3d) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(1.230097) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1b) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1f) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1a) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1c) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(1g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(1.230124) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3e) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(1.230138) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3g) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.230207) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3h) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3i) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.230270) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(2m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240002) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(3.240022) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3j) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.1(3n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240009) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(3.240043) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.240142) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240037) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240053) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.240152) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3l) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240077) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.242028) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.241063) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.242038) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3m) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240090) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5.240021) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.240107) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.242066) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3n) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5.250001) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3o) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.250016) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.250021) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5.250030) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.250022) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250040) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5.250033) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250044) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250053) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.250037) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.250045) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.252001) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.252002) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(1.250127) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.2(3p) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(1.250131) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250101) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(1.250174) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250117) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5.250043) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250039) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(5.250045) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.250060) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(1.250130) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(4.241014) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(2.250063) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(1.250192) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 4.3(6.260003) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 6.0(1.250194) | affected | Unavailable | Unavailable | Unavailable | None listed |