{"id":"CVE-2026-20094","title":"A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the r…","summary":"A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the r…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-77"],"vendor":"cisco","product":"unified_computing_system","affected":["unified_computing_system = 3.1(1d)","unified_computing_system = 3.1(2b)","unified_computing_system = 3.1(2c)","unified_computing_system = 3.1(2d)","unified_computing_system = 3.1(2e)","unified_computing_system = 3.1(2g)","unified_computing_system = 3.1(2i)","unified_computing_system = 3.1(3a)","unified_computing_system = 3.1(3b)","unified_computing_system = 3.1(3c)","unified_computing_system = 3.1(3d)","unified_computing_system = 3.1(3g)","unified_computing_system = 3.1(3h)","unified_computing_system = 3.1(3i)","unified_computing_system = 3.1(3j)","unified_computing_system = 3.1(3k)","unified_computing_system = 4.0(1.240)","unified_computing_system = 4.0(1a)","unified_computing_system = 4.0(1b)","unified_computing_system = 4.0(1c)","unified_computing_system = 4.0(1d)","unified_computing_system = 4.0(1e)","unified_computing_system = 4.0(1g)","unified_computing_system = 4.0(1h)","unified_computing_system = 4.0(2c)","unified_computing_system = 4.0(2d)","unified_computing_system = 4.0(2f)","unified_computing_system = 4.0(2g)","unified_computing_system = 4.0(2h)","unified_computing_system = 4.0(2i)","unified_computing_system = 4.0(2k)","unified_computing_system = 4.0(2l)","unified_computing_system = 4.0(2m)","unified_computing_system = 4.0(2n)","unified_computing_system = 4.0(2o)","unified_computing_system = 4.0(2p)","unified_computing_system = 4.0(2q)","unified_computing_system = 4.0(2r)","unified_computing_system = 4.0(4b)","unified_computing_system = 4.0(4c)","unified_computing_system = 4.0(4d)","unified_computing_system = 4.0(4e)","unified_computing_system = 4.0(4f)","unified_computing_system = 4.0(4h)","unified_computing_system = 4.0(4i)","unified_computing_system = 4.0(4j)","unified_computing_system = 4.0(4k)","unified_computing_system = 4.0(4l)","unified_computing_system = 4.0(4m)","unified_computing_system = 4.0(4n)","unified_computing_system = 4.1(1c)","unified_computing_system = 4.1(1d)","unified_computing_system = 4.1(1f)","unified_computing_system = 4.1(1g)","unified_computing_system = 4.1(1h)","unified_computing_system = 4.1(2a)","unified_computing_system = 4.1(2b)","unified_computing_system = 4.1(2d)","unified_computing_system = 4.1(2e)","unified_computing_system = 4.1(2f)","unified_computing_system = 4.1(2g)","unified_computing_system = 4.1(2h)","unified_computing_system = 4.1(2j)","unified_computing_system = 4.1(2k)","unified_computing_system = 4.1(2l)","unified_computing_system = 4.1(2m)","unified_computing_system = 4.1(3b)","unified_computing_system = 4.1(3c)","unified_computing_system = 4.1(3d)","unified_computing_system = 4.1(3f)","unified_computing_system = 4.1(3g)","unified_computing_system = 4.1(3h)","unified_computing_system = 4.1(3i)","unified_computing_system = 4.1(3l)","unified_computing_system = 4.1(3m)","unified_computing_system = 4.1(3n)","unified_computing_system = 4.2(1a)","unified_computing_system = 4.2(1b)","unified_computing_system = 4.2(1c)","unified_computing_system = 4.2(1e)","unified_computing_system = 4.2(1f)","unified_computing_system = 4.2(1g)","unified_computing_system = 4.2(1i)","unified_computing_system = 4.2(1j)","unified_computing_system = 4.2(2a)","unified_computing_system = 4.2(2f)","unified_computing_system = 4.2(2g)","unified_computing_system = 4.2(3b)","unified_computing_system = 4.2(3d)","unified_computing_system = 4.2(3e)","unified_computing_system = 4.2(3g)","unified_computing_system = 4.2(3h)","unified_computing_system = 4.2(3i)","unified_computing_system = 4.2(3j)","unified_computing_system = 4.2(3k)","unified_computing_system = 4.2(3l)","unified_computing_system = 4.2(3m)","unified_computing_system = 4.2(3n)","unified_computing_system = 4.2(3o)","unified_computing_system = 4.2(3p)"],"published":"2026-04-01","updated":"2026-08-28","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-20094","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt","label":"psirt@cisco.com"}],"tags":["nvd"],"epss":0.01118,"epssPercentile":0.642,"ingestedAt":"2026-08-29T00:27:52.199Z","slug":"CVE-2026-20094","body":"## Overview\n\nA vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.\r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.\n\n## Affected\n\n- `unified_computing_system = 3.1(1d)`\n- `unified_computing_system = 3.1(2b)`\n- `unified_computing_system = 3.1(2c)`\n- `unified_computing_system = 3.1(2d)`\n- `unified_computing_system = 3.1(2e)`\n- `unified_computing_system = 3.1(2g)`\n- `unified_computing_system = 3.1(2i)`\n- `unified_computing_system = 3.1(3a)`\n- `unified_computing_system = 3.1(3b)`\n- `unified_computing_system = 3.1(3c)`\n- `unified_computing_system = 3.1(3d)`\n- `unified_computing_system = 3.1(3g)`\n- `unified_computing_system = 3.1(3h)`\n- `unified_computing_system = 3.1(3i)`\n- `unified_computing_system = 3.1(3j)`\n- `unified_computing_system = 3.1(3k)`\n- `unified_computing_system = 4.0(1.240)`\n- `unified_computing_system = 4.0(1a)`\n- `unified_computing_system = 4.0(1b)`\n- `unified_computing_system = 4.0(1c)`\n- `unified_computing_system = 4.0(1d)`\n- `unified_computing_system = 4.0(1e)`\n- `unified_computing_system = 4.0(1g)`\n- `unified_computing_system = 4.0(1h)`\n- `unified_computing_system = 4.0(2c)`\n- `unified_computing_system = 4.0(2d)`\n- `unified_computing_system = 4.0(2f)`\n- `unified_computing_system = 4.0(2g)`\n- `unified_computing_system = 4.0(2h)`\n- `unified_computing_system = 4.0(2i)`\n- `unified_computing_system = 4.0(2k)`\n- `unified_computing_system = 4.0(2l)`\n- `unified_computing_system = 4.0(2m)`\n- `unified_computing_system = 4.0(2n)`\n- `unified_computing_system = 4.0(2o)`\n- `unified_computing_system = 4.0(2p)`\n- `unified_computing_system = 4.0(2q)`\n- `unified_computing_system = 4.0(2r)`\n- `unified_computing_system = 4.0(4b)`\n- `unified_computing_system = 4.0(4c)`\n- `unified_computing_system = 4.0(4d)`\n- `unified_computing_system = 4.0(4e)`\n- `unified_computing_system = 4.0(4f)`\n- `unified_computing_system = 4.0(4h)`\n- `unified_computing_system = 4.0(4i)`\n- `unified_computing_system = 4.0(4j)`\n- `unified_computing_system = 4.0(4k)`\n- `unified_computing_system = 4.0(4l)`\n- `unified_computing_system = 4.0(4m)`\n- `unified_computing_system = 4.0(4n)`\n- `unified_computing_system = 4.1(1c)`\n- `unified_computing_system = 4.1(1d)`\n- `unified_computing_system = 4.1(1f)`\n- `unified_computing_system = 4.1(1g)`\n- `unified_computing_system = 4.1(1h)`\n- `unified_computing_system = 4.1(2a)`\n- `unified_computing_system = 4.1(2b)`\n- `unified_computing_system = 4.1(2d)`\n- `unified_computing_system = 4.1(2e)`\n- `unified_computing_system = 4.1(2f)`\n- `unified_computing_system = 4.1(2g)`\n- `unified_computing_system = 4.1(2h)`\n- `unified_computing_system = 4.1(2j)`\n- `unified_computing_system = 4.1(2k)`\n- `unified_computing_system = 4.1(2l)`\n- `unified_computing_system = 4.1(2m)`\n- `unified_computing_system = 4.1(3b)`\n- `unified_computing_system = 4.1(3c)`\n- `unified_computing_system = 4.1(3d)`\n- `unified_computing_system = 4.1(3f)`\n- `unified_computing_system = 4.1(3g)`\n- `unified_computing_system = 4.1(3h)`\n- `unified_computing_system = 4.1(3i)`\n- `unified_computing_system = 4.1(3l)`\n- `unified_computing_system = 4.1(3m)`\n- `unified_computing_system = 4.1(3n)`\n- `unified_computing_system = 4.2(1a)`\n- `unified_computing_system = 4.2(1b)`\n- `unified_computing_system = 4.2(1c)`\n- `unified_computing_system = 4.2(1e)`\n- `unified_computing_system = 4.2(1f)`\n- `unified_computing_system = 4.2(1g)`\n- `unified_computing_system = 4.2(1i)`\n- `unified_computing_system = 4.2(1j)`\n- `unified_computing_system = 4.2(2a)`\n- `unified_computing_system = 4.2(2f)`\n- `unified_computing_system = 4.2(2g)`\n- `unified_computing_system = 4.2(3b)`\n- `unified_computing_system = 4.2(3d)`\n- `unified_computing_system = 4.2(3e)`\n- `unified_computing_system = 4.2(3g)`\n- `unified_computing_system = 4.2(3h)`\n- `unified_computing_system = 4.2(3i)`\n- `unified_computing_system = 4.2(3j)`\n- `unified_computing_system = 4.2(3k)`\n- `unified_computing_system = 4.2(3l)`\n- `unified_computing_system = 4.2(3m)`\n- `unified_computing_system = 4.2(3n)`\n- `unified_computing_system = 4.2(3o)`\n- `unified_computing_system = 4.2(3p)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}