CVE-2026-20288
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying OS and elevate privileges to root. This is due to improper input validation, and exploitation involves entering crafted inputs. Successful exploitation allows command execution as root.
Risk Assessment
The risk is high because an attacker with admin privileges can gain full control of the system, potentially leading to complete compromise and further damage.
Recommendation
It is recommended to apply Cisco-provided patches immediately and restrict management interface access to trusted networks. Also monitor logs for unusual administrator actions.
Other vulnerabilities in Cisco Integrated Management Controller
See all- CVE-2014-8003High
Cisco Integrated Management Controller in Cisco Unified Computing System 2.2(2c)A and earlier allows local users to obtain shell access via a crafted map-nfs command.
- CVE-2026-20198Medium
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user. This is due to insufficient input validation, and exploitation involves persuading a user to click a crafted link. Successful exploitation could allow arbitrary script execution in the user's browser or access to sensitive browser-based information.
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. Cisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.