CVE-2026-20200High· 8.8▾ MidnightPoC availableA vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privi…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 48.4 · likelihood 1.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Sep 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
5.7%
1 GitHub repo (last check)
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
unified_computing_system_standalone 4.3(1.230097)unified_computing_system_standalone 4.3(1.230124)unified_computing_system_standalone 4.3(1.230138)unified_computing_system_standalone 4.3(2.230207)unified_computing_system_standalone 4.3(2.230270)unified_computing_system_standalone 4.3(2.240002)unified_computing_system_standalone 4.3(3.240022)unified_computing_system_standalone 4.3(3.240043)unified_computing_system_standalone 4.3(4.240142)unified_computing_system_standalone 4.3(4.240152)unified_computing_system_standalone 4.3(4.242028)unified_computing_system_standalone 4.3(4.241063)unified_computing_system_standalone 4.3(4.242038)unified_computing_system_standalone 4.3(5.240021)unified_computing_system_standalone 4.3(4.242066)unified_computing_system_standalone 4.3(5.250001)unified_computing_system_standalone 4.3(5.250030)unified_computing_system_standalone 4.3(6.250040)unified_computing_system_standalone 4.3(5.250033)unified_computing_system_standalone 4.3(6.250044)unified_computing_system_standalone 4.3(6.250053)unified_computing_system_standalone 4.3(4.252001)unified_computing_system_standalone 4.3(4.252002)unified_computing_system_standalone 6.0(1.250127)unified_computing_system_standalone 6.0(1.250131)unified_computing_system_standalone 4.3(6.250101)unified_computing_system_standalone 6.0(1.250174)unified_computing_system_standalone 4.3(6.250117)unified_computing_system_standalone 4.3(5.250043)unified_computing_system_standalone 4.3(6.250039)unified_computing_system_standalone 4.3(5.250045)unified_computing_system_standalone 4.3(6.250060)unified_computing_system_standalone 6.0(1.250130)unified_computing_system_standalone 4.3(4.241014)unified_computing_system_standalone 6.0(1.250192)unified_computing_system_standalone 4.3(6.260003)unified_computing_system_standalone 6.0(1.250194)unified_computing_system_standalone 4.3(6.260017)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-20284Critical· 9.1A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls
CVE-2026-76460Critical· 10.0A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint
CVE-2026-76461Critical· 9.8A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This …
CVE-2026-20306Critical· 9.1A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root
CVE-2026-20305Critical· 9.1A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root
CVE-2026-20344High· 8.8A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device