NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Cisco Integrated Management Controller
view advisory published 2026-04-03
Cisco heeft meerdere kwetsbaarheden verholpen in Cisco Integrated Management Controller (IMC).
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20097US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root u… | ||||
| CVE-2026-20096US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on… | ||||
| CVE-2026-20095US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on… | ||||
| CVE-2026-20094US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on a… | ||||
| CVE-2026-20093US | — | — | ||
A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and ga… | ||||
| CVE-2026-20090US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20089US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20088US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20087US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack again… | ||||
| CVE-2026-20085US | — | — | ||
A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan