DeutschShown in its original language — a full translation is planned for a future version.
Cisco Integrated Management Controller: Mehrere Schwachstellen
view advisory published 2026-04-01
Ein Angreifer kann mehrere Schwachstellen in Cisco Integrated Management Controller ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Root-Rechten auszuführen oder Cross-Site-Scripting-Angriffe durchzuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20097US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root u… | ||||
| CVE-2026-20096US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on… | ||||
| CVE-2026-20095US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on… | ||||
| CVE-2026-20094US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on a… | ||||
| CVE-2026-20093US | — | — | ||
A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and ga… | ||||
| CVE-2026-20090US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20089US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20088US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20087US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20085US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory cisco-sa-cimc-auth-bypass-AgG2BxTn vom 2026-04-01external
- Cisco Security Advisory cisco-sa-cimc-cmd-inj-3hKN3bVt vom 2026-04-01external
- Cisco Security Advisory cisco-sa-cimc-xss-A2tkgVAB vom 2026-04-01external
- WID-SEC-W-2026-0953 - CSAF Versionself
- WID-SEC-2026-0953 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan