{"id":"CVE-2026-20097","title":"A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validatio…","summary":"A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validatio…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-787","CWE-20"],"vendor":"cisco","product":"unified_computing_system","affected":["unified_computing_system = 3.1(1d)","unified_computing_system = 3.1(2b)","unified_computing_system = 3.1(2c)","unified_computing_system = 3.1(2d)","unified_computing_system = 3.1(2e)","unified_computing_system = 3.1(2g)","unified_computing_system = 3.1(2i)","unified_computing_system = 3.1(3a)","unified_computing_system = 3.1(3b)","unified_computing_system = 3.1(3c)","unified_computing_system = 3.1(3d)","unified_computing_system = 3.1(3g)","unified_computing_system = 3.1(3h)","unified_computing_system = 3.1(3i)","unified_computing_system = 3.1(3j)","unified_computing_system = 3.1(3k)","unified_computing_system = 4.0(1.240)","unified_computing_system = 4.0(1a)","unified_computing_system = 4.0(1b)","unified_computing_system = 4.0(1c)","unified_computing_system = 4.0(1d)","unified_computing_system = 4.0(1e)","unified_computing_system = 4.0(1g)","unified_computing_system = 4.0(1h)","unified_computing_system = 4.0(2c)","unified_computing_system = 4.0(2d)","unified_computing_system = 4.0(2f)","unified_computing_system = 4.0(2g)","unified_computing_system = 4.0(2h)","unified_computing_system = 4.0(2i)","unified_computing_system = 4.0(2l)","unified_computing_system = 4.0(2n)","unified_computing_system = 4.0(2o)","unified_computing_system = 4.0(2p)","unified_computing_system = 4.0(2q)","unified_computing_system = 4.0(2r)","unified_computing_system = 4.0(4b)","unified_computing_system = 4.0(4c)","unified_computing_system = 4.0(4d)","unified_computing_system = 4.0(4e)","unified_computing_system = 4.0(4f)","unified_computing_system = 4.0(4h)","unified_computing_system = 4.0(4i)","unified_computing_system = 4.0(4k)","unified_computing_system = 4.0(4l)","unified_computing_system = 4.0(4m)","unified_computing_system = 4.0(4n)","unified_computing_system = 4.1(1c)","unified_computing_system = 4.1(1d)","unified_computing_system = 4.1(1f)","unified_computing_system = 4.1(1g)","unified_computing_system = 4.1(1h)","unified_computing_system = 4.1(2a)","unified_computing_system = 4.1(2b)","unified_computing_system = 4.1(2d)","unified_computing_system = 4.1(2e)","unified_computing_system = 4.1(2f)","unified_computing_system = 4.1(2g)","unified_computing_system = 4.1(2h)","unified_computing_system = 4.1(2j)","unified_computing_system = 4.1(2k)","unified_computing_system = 4.1(2l)","unified_computing_system = 4.1(2m)","unified_computing_system = 4.1(3b)","unified_computing_system = 4.1(3c)","unified_computing_system = 4.1(3d)","unified_computing_system = 4.1(3f)","unified_computing_system = 4.1(3h)","unified_computing_system = 4.1(3i)","unified_computing_system = 4.1(3l)","unified_computing_system = 4.1(3m)","unified_computing_system = 4.1(3n)","unified_computing_system = 4.2(1a)","unified_computing_system = 4.2(1b)","unified_computing_system = 4.2(1c)","unified_computing_system = 4.2(1e)","unified_computing_system = 4.2(1f)","unified_computing_system = 4.2(1g)","unified_computing_system = 4.2(1i)","unified_computing_system = 4.2(1j)","unified_computing_system = 4.2(2a)","unified_computing_system = 4.2(2f)","unified_computing_system = 4.2(2g)","unified_computing_system = 4.2(3b)","unified_computing_system = 4.2(3d)","unified_computing_system = 4.2(3e)","unified_computing_system = 4.2(3g)","unified_computing_system = 4.2(3h)","unified_computing_system = 4.2(3i)","unified_computing_system = 4.2(3j)","unified_computing_system = 4.2(3l)","unified_computing_system = 4.2(3m)","unified_computing_system = 4.2(3n)","unified_computing_system = 4.2(3o)","unified_computing_system = 4.2(3p)","unified_computing_system = 4.3(1.230097)","unified_computing_system = 4.3(1.230124)","unified_computing_system = 4.3(1.230138)","unified_computing_system = 4.3(2.230207)","unified_computing_system = 4.3(2.230270)"],"published":"2026-04-01","updated":"2026-08-28","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-20097","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt","label":"psirt@cisco.com"}],"tags":["nvd"],"epss":0.00391,"epssPercentile":0.33099,"ingestedAt":"2026-08-29T00:27:52.321Z","slug":"CVE-2026-20097","body":"## Overview\n\nA vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.\r\n\r\nCisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.\n\n## Affected\n\n- `unified_computing_system = 3.1(1d)`\n- `unified_computing_system = 3.1(2b)`\n- `unified_computing_system = 3.1(2c)`\n- `unified_computing_system = 3.1(2d)`\n- `unified_computing_system = 3.1(2e)`\n- `unified_computing_system = 3.1(2g)`\n- `unified_computing_system = 3.1(2i)`\n- `unified_computing_system = 3.1(3a)`\n- `unified_computing_system = 3.1(3b)`\n- `unified_computing_system = 3.1(3c)`\n- `unified_computing_system = 3.1(3d)`\n- `unified_computing_system = 3.1(3g)`\n- `unified_computing_system = 3.1(3h)`\n- `unified_computing_system = 3.1(3i)`\n- `unified_computing_system = 3.1(3j)`\n- `unified_computing_system = 3.1(3k)`\n- `unified_computing_system = 4.0(1.240)`\n- `unified_computing_system = 4.0(1a)`\n- `unified_computing_system = 4.0(1b)`\n- `unified_computing_system = 4.0(1c)`\n- `unified_computing_system = 4.0(1d)`\n- `unified_computing_system = 4.0(1e)`\n- `unified_computing_system = 4.0(1g)`\n- `unified_computing_system = 4.0(1h)`\n- `unified_computing_system = 4.0(2c)`\n- `unified_computing_system = 4.0(2d)`\n- `unified_computing_system = 4.0(2f)`\n- `unified_computing_system = 4.0(2g)`\n- `unified_computing_system = 4.0(2h)`\n- `unified_computing_system = 4.0(2i)`\n- `unified_computing_system = 4.0(2l)`\n- `unified_computing_system = 4.0(2n)`\n- `unified_computing_system = 4.0(2o)`\n- `unified_computing_system = 4.0(2p)`\n- `unified_computing_system = 4.0(2q)`\n- `unified_computing_system = 4.0(2r)`\n- `unified_computing_system = 4.0(4b)`\n- `unified_computing_system = 4.0(4c)`\n- `unified_computing_system = 4.0(4d)`\n- `unified_computing_system = 4.0(4e)`\n- `unified_computing_system = 4.0(4f)`\n- `unified_computing_system = 4.0(4h)`\n- `unified_computing_system = 4.0(4i)`\n- `unified_computing_system = 4.0(4k)`\n- `unified_computing_system = 4.0(4l)`\n- `unified_computing_system = 4.0(4m)`\n- `unified_computing_system = 4.0(4n)`\n- `unified_computing_system = 4.1(1c)`\n- `unified_computing_system = 4.1(1d)`\n- `unified_computing_system = 4.1(1f)`\n- `unified_computing_system = 4.1(1g)`\n- `unified_computing_system = 4.1(1h)`\n- `unified_computing_system = 4.1(2a)`\n- `unified_computing_system = 4.1(2b)`\n- `unified_computing_system = 4.1(2d)`\n- `unified_computing_system = 4.1(2e)`\n- `unified_computing_system = 4.1(2f)`\n- `unified_computing_system = 4.1(2g)`\n- `unified_computing_system = 4.1(2h)`\n- `unified_computing_system = 4.1(2j)`\n- `unified_computing_system = 4.1(2k)`\n- `unified_computing_system = 4.1(2l)`\n- `unified_computing_system = 4.1(2m)`\n- `unified_computing_system = 4.1(3b)`\n- `unified_computing_system = 4.1(3c)`\n- `unified_computing_system = 4.1(3d)`\n- `unified_computing_system = 4.1(3f)`\n- `unified_computing_system = 4.1(3h)`\n- `unified_computing_system = 4.1(3i)`\n- `unified_computing_system = 4.1(3l)`\n- `unified_computing_system = 4.1(3m)`\n- `unified_computing_system = 4.1(3n)`\n- `unified_computing_system = 4.2(1a)`\n- `unified_computing_system = 4.2(1b)`\n- `unified_computing_system = 4.2(1c)`\n- `unified_computing_system = 4.2(1e)`\n- `unified_computing_system = 4.2(1f)`\n- `unified_computing_system = 4.2(1g)`\n- `unified_computing_system = 4.2(1i)`\n- `unified_computing_system = 4.2(1j)`\n- `unified_computing_system = 4.2(2a)`\n- `unified_computing_system = 4.2(2f)`\n- `unified_computing_system = 4.2(2g)`\n- `unified_computing_system = 4.2(3b)`\n- `unified_computing_system = 4.2(3d)`\n- `unified_computing_system = 4.2(3e)`\n- `unified_computing_system = 4.2(3g)`\n- `unified_computing_system = 4.2(3h)`\n- `unified_computing_system = 4.2(3i)`\n- `unified_computing_system = 4.2(3j)`\n- `unified_computing_system = 4.2(3l)`\n- `unified_computing_system = 4.2(3m)`\n- `unified_computing_system = 4.2(3n)`\n- `unified_computing_system = 4.2(3o)`\n- `unified_computing_system = 4.2(3p)`\n- `unified_computing_system = 4.3(1.230097)`\n- `unified_computing_system = 4.3(1.230124)`\n- `unified_computing_system = 4.3(1.230138)`\n- `unified_computing_system = 4.3(2.230207)`\n- `unified_computing_system = 4.3(2.230270)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}