- Description
- A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
- Source
- psirt@cisco.com
- NVD status
- Analyzed
- Products
- unified_computing_system
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- psirt@cisco.com
- CWE-141
- Hype score
- Not currently trending
🚨 New Cisco IMC vulnerabilities (CVE-2026-20200 & CVE-2026-20288) can enable root-level command execution in affected environments. Patch, restrict access and review logs. 👉 Explore here. https://t.co/pcAxFfaTxq #Cisco #CVE #Cybersecurity #Sequretek https://t.co/I21d
@sequretek_sqtk
14 Aug 2026
56 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
PoC exploit code is public for CVE-2026-20200, a Cisco IMC argument injection flaw enabling root RCE. CVSS 8.8. Patch details inside. #Cisco #RCE #CVE #InfoSec #CyberSecurity https://t.co/cHFC9N3OxY
@Daily_CyberSec
7 Aug 2026
422 Impressions
1 Retweet
2 Likes
0 Bookmarks
0 Replies
0 Quotes
Cisco IMCの重大な脆弱性により攻撃者がroot権限を取得可能、概念実証（PoC）が公開されました（CVE-2026-20200） Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200) #HelpNetSecurity (Aug 6) https://t.co/ZegJzzUivE
@foxbook
7 Aug 2026
289 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200): Cisco has fixed a critical vulnerability (CVE-2026-20200) in its Integrated Management Controller (IMC), which allows an attacker to run commands as root through the controller’s… https://t.co/MEQPdKXD9
@shah_sheikh
6 Aug 2026
73 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230097\\):*:*:*:*:*:*:*",
"matchCriteriaId": "707943EC-B4E1-402E-93F2-61155E9D9A7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230124\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BC28F760-C39D-4FD4-AC70-8CEC9ECDA554",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230138\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AA121B58-42FC-4AAA-BDA8-94D0D6F73EB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.230207\\):*:*:*:*:*:*:*",
"matchCriteriaId": "67EA5B96-4C34-430D-91A1-E599EDBC5375",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.230270\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A81EEB35-D849-48C8-880F-44586EADA1CF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240002\\):*:*:*:*:*:*:*",
"matchCriteriaId": "82D66234-EF8F-41B7-A5D4-0CA5D48793EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(3.240022\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B514BF97-4D5F-41EB-8A2F-61C7872CBE5A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(3.240043\\):*:*:*:*:*:*:*",
"matchCriteriaId": "50F49E6F-229D-4179-8CE9-907D6A33466C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.240142\\):*:*:*:*:*:*:*",
"matchCriteriaId": "60A65978-E02D-4D06-A75F-45314FE839D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.240152\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6E341DE8-C1B3-4781-9317-50C3003AB5FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.241014\\):*:*:*:*:*:*:*",
"matchCriteriaId": "93A935AB-601E-4FFD-9D86-868389D8F9F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.241063\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1DDEC37C-56DF-4E48-9460-0C1DB42A4D3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242028\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BC737A47-3CE9-4023-99D5-D7A2DCAA41FB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242038\\):*:*:*:*:*:*:*",
"matchCriteriaId": "288C568D-AA87-4FF2-A581-4D5CD33B820B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242066\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A8DE4607-D9BC-4717-9394-9BD4327ADBDB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.252001\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5A35D000-58B6-435A-86DE-EE179A99513F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.252002\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A1DDEA92-C6E3-4046-983E-A8031BC6C690",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.240021\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5293950E-970F-4542-8ADD-9D1692D4C9EE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250001\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6E70EC20-7CDB-4DD4-8F1D-2DCDF5DBD147",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250030\\):*:*:*:*:*:*:*",
"matchCriteriaId": "D0DA7140-AB72-4215-995E-956D35669766",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250033\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1A62E579-B113-40A5-A497-92A80CC91F2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250043\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8A424479-9816-4A4B-A9CA-1349FD016FEC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250045\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B92AB187-9C5E-42A6-B1FD-219116583914",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250039\\):*:*:*:*:*:*:*",
"matchCriteriaId": "4CBF1228-D8D8-4FAF-9986-55B8D4C5B3B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250040\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2B40F8FD-19AD-4726-B2E9-DAD09394970E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250044\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B7D0F9CB-0B4C-4680-BCFF-E80633DCD3F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250053\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8D9E7A5F-99AE-4F34-867B-931C4B880E61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250060\\):*:*:*:*:*:*:*",
"matchCriteriaId": "85DDCB2E-396C-4B4B-9F06-2B3E36045EC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250101\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F1705D6C-69F7-4492-A4AF-09BFCA820286",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250117\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B51CAF4B-0BCD-4DAF-8774-94212B1E357D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.260003\\):*:*:*:*:*:*:*",
"matchCriteriaId": "24114854-41E9-4E3C-813D-A006FCA7E585",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.260017\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6DD2F3BC-D516-4E57-A455-8A3995C8872B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250127\\):*:*:*:*:*:*:*",
"matchCriteriaId": "897DDFB9-DF7A-4455-9D5F-17305920AB76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250130\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8B7A2A76-A5EE-4975-A735-3BCC6C89EF8D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250131\\):*:*:*:*:*:*:*",
"matchCriteriaId": "437298D0-C839-43E4-8FE1-7CB0977FB8C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250174\\):*:*:*:*:*:*:*",
"matchCriteriaId": "41B1F1F7-915D-4CC8-9DCF-200D84872C81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250192\\):*:*:*:*:*:*:*",
"matchCriteriaId": "25CF81F3-6576-45F1-97AE-9AA21D5575E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250194\\):*:*:*:*:*:*:*",
"matchCriteriaId": "63A1580D-A644-4F4C-B41E-5D97273CB6A6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]