© 2026 vulntracker.io

CVE-2026-20094

Cisco Integrated Management Controller Command Injection Vulnerability

HIGH

8.8

CVSS Score

Published: April 1, 2026 at 04:28 PM UTC

Updated: October 26, 2026 at 09:10 PM UTC

3 products affected across 1 vendorUnified Computing SystemUnified Computing System E Series SoftwareUnified Computing System E Series

Using Cisco Unified Computing System (Standalone) by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Unified Computing System (Standalone) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Unified Computing System · Cisco

95%

3.1(1d)3.1(2b)3.1(2c)3.1(2d)3.1(2e)3.1(2g)3.1(2i)3.1(3a)3.1(3b)3.1(3c)3.1(3d)3.1(3g)3.1(3h)3.1(3i)3.1(3j)3.1(3k)3.1\(1d\)3.1\(2b\)3.1\(2c\)3.1\(2d\)3.1\(2e\)3.1\(2g\)3.1\(2i\)3.1\(3a\)3.1\(3b\)3.1\(3c\)3.1\(3d\)3.1\(3g\)3.1\(3h\)3.1\(3i\)3.1\(3j\)3.1\(3k\)4.0(1.240)4.0(1a)4.0(1b)4.0(1c)4.0(1d)4.0(1e)4.0(1g)4.0(1h)4.0(2c)4.0(2d)4.0(2f)4.0(2g)4.0(2h)4.0(2i)4.0(2k)4.0(2l)4.0(2m)4.0(2n)4.0(2o)4.0(2p)4.0(2q)4.0(2r)4.0(4b)4.0(4c)4.0(4d)4.0(4e)4.0(4f)4.0(4h)4.0(4i)4.0(4j)4.0(4k)4.0(4l)4.0(4m)4.0(4n)4.0\(1.240\)4.0\(1a\)4.0\(1b\)4.0\(1c\)4.0\(1d\)4.0\(1e\)4.0\(1g\)4.0\(1h\)4.0\(2c\)4.0\(2d\)4.0\(2f\)4.0\(2g\)4.0\(2h\)4.0\(2i\)4.0\(2k\)4.0\(2l\)4.0\(2m\)4.0\(2n\)4.0\(2o\)4.0\(2p\)4.0\(2q\)4.0\(2r\)4.0\(4b\)4.0\(4c\)4.0\(4d\)4.0\(4e\)4.0\(4f\)4.0\(4h\)4.0\(4i\)4.0\(4j\)4.0\(4k\)4.0\(4l\)4.0\(4m\)4.0\(4n\)4.1(1c)4.1(1d)4.1(1f)4.1(1g)4.1(1h)4.1(2a)4.1(2b)4.1(2d)4.1(2e)4.1(2f)4.1(2g)4.1(2h)4.1(2j)4.1(2k)4.1(2l)4.1(2m)4.1(3b)4.1(3c)4.1(3d)4.1(3f)4.1(3g)4.1(3h)4.1(3i)4.1(3l)4.1(3m)4.1(3n)4.1\(1c\)4.1\(1d\)4.1\(1f\)4.1\(1g\)4.1\(1h\)4.1\(2a\)4.1\(2b\)4.1\(2d\)4.1\(2e\)4.1\(2f\)4.1\(2g\)4.1\(2h\)4.1\(2j\)4.1\(2k\)4.1\(2l\)4.1\(2m\)4.1\(3b\)4.1\(3c\)4.1\(3d\)4.1\(3f\)4.1\(3g\)4.1\(3h\)4.1\(3i\)4.1\(3l\)4.1\(3m\)4.1\(3n\)4.2(1a)4.2(1b)4.2(1c)4.2(1e)4.2(1f)4.2(1g)4.2(1i)4.2(1j)4.2(2a)4.2(2f)4.2(2g)4.2(3b)4.2(3d)4.2(3e)4.2(3g)4.2(3h)4.2(3i)4.2(3j)4.2(3k)4.2(3l)4.2(3m)4.2(3n)4.2(3o)4.2(3p)4.2\(1a\)4.2\(1b\)4.2\(1c\)4.2\(1e\)4.2\(1f\)4.2\(1g\)4.2\(1i\)4.2\(1j\)4.2\(2a\)4.2\(2f\)4.2\(2g\)4.2\(3b\)4.2\(3d\)4.2\(3e\)4.2\(3g\)4.2\(3h\)4.2\(3i\)4.2\(3j\)4.2\(3k\)4.2\(3l\)4.2\(3m\)4.2\(3n\)4.2\(3o\)4.2\(3p\)4.3(1.230097)4.3(1.230124)4.3(1.230138)4.3(2.230207)4.3(2.230270)4.3(2.240002)4.3(2.240009)4.3(2.240037)4.3(2.240053)4.3(2.240077)4.3(2.240090)4.3(2.240107)4.3(2.250016)4.3(2.250021)4.3(2.250022)4.3(2.250037)4.3(2.250045)4.3(2.250063)4.3(3.240022)4.3(3.240041)4.3(3.240043)4.3(4.240142)4.3(4.240152)4.3(4.241014)4.3(4.241063)4.3(4.242028)4.3(4.242038)4.3(4.242066)4.3(4.252001)4.3(4.252002)4.3(5.240021)4.3(5.250001)4.3(5.250030)4.3(5.250033)4.3(5.250043)4.3(5.250045)4.3(6.250039)4.3(6.250040)4.3(6.250044)4.3(6.250053)4.3(6.250060)4.3(6.250101)4.3(6.250117)4.3(6.260003)4.3\(1.230097\)4.3\(1.230124\)4.3\(1.230138\)4.3\(2.230207\)4.3\(2.230270\)4.3\(2.240002\)4.3\(2.240009\)4.3\(2.240037\)4.3\(2.240053\)4.3\(2.240077\)4.3\(2.240090\)4.3\(2.240107\)4.3\(2.250016\)4.3\(2.250021\)4.3\(2.250022\)4.3\(2.250037\)4.3\(2.250045\)4.3\(2.250063\)4.3\(3.240022\)4.3\(3.240041\)4.3\(3.240043\)4.3\(4.240142\)4.3\(4.240152\)4.3\(4.241014\)4.3\(4.241063\)4.3\(4.242028\)4.3\(4.242038\)4.3\(4.242066\)4.3\(4.252001\)4.3\(4.252002\)4.3\(5.240021\)4.3\(5.250001\)4.3\(5.250030\)4.3\(5.250033\)4.3\(5.250043\)4.3\(5.250045\)4.3\(6.250039\)4.3\(6.250040\)4.3\(6.250044\)4.3\(6.250053\)4.3\(6.250060\)4.3\(6.250101\)4.3\(6.250117\)4.3\(6.260003\)6.0(1.250127)6.0(1.250130)6.0(1.250131)6.0(1.250174)6.0(1.250192)6.0(1.250194)6.0\(1.250127\)6.0\(1.250130\)6.0\(1.250131\)6.0\(1.250174\)6.0\(1.250192\)6.0\(1.250194\)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt

References (1)

Vendor Advisory

Source: cverecord

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHcisco

Attack Vector: NETWORK
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusANALYZED

CWE

CWE-77

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card