CVE-2026-20094 - Vulnerability Analysis

Overview

Cisco IMC contains a command injection caused by improper validation of user-supplied input in the web-based management interface, letting authenticated remote attackers with read-only privileges execute arbitrary commands as root, exploit requires authenticated access with read-only privileges.

Severity & Score

Impact

Authenticated attackers with read-only privileges can execute arbitrary commands as root, leading to full system compromise.

Mitigation

Update to the latest available version that addresses this vulnerability.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner