CVE-2026-20200

highPriorität · verfolgen · 10EPSS 0.007 · 54. PerzentilExploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.73% (54th) EPSS

CVSS 8.8 · high

Is it mine?

132 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.  This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. 

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behoben4.3(1.230097)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(1.230124)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(1.230138)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(2.230207)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(2.230270)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(2.240002)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(3.240022)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(3.240043)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.240142)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.240152)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.241014)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.241063)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.242028)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.242038)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.242066)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.252001)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(4.252002)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(5.240021)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(5.250001)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(5.250030)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(5.250033)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(5.250043)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(5.250045)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250039)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250040)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250044)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250053)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250060)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250101)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.250117)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.260003)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben4.3(6.260017)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben6.0(1.250127)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben6.0(1.250130)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben6.0(1.250131)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben6.0(1.250174)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben6.0(1.250192)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben6.0(1.250194)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18.8highAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · psirt@cisco.com USAusnutzbarkeit 2.8 · Auswirkung 5.9

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Cisco PSIRT US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-141USCWE-141US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

NSIDE-ATTACK-LOGIC/CIMCownPoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200PoC · poc_in_github

betroffene Produkte (132)

Betroffene Produkte und Versionsbereiche.

Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server <4.3(6.260033)alle Versionencert_bundDE
Cisco Integrated Management Controller UCS C-Series M7 and M8 Rack Server <6.0(2.260044)alle Versionencert_bundDE
Cisco Secure Endpoint Private Cloud Appliances <4.3(6.260054) (M6)alle Versionencert_bundDE
Cisco Secure Firewall Management Center Appliances <4.3(2.260020) (M5)alle Versionencert_bundDE
Cisco Secure Firewall Management Center Appliances <6.0(2.260143) (M6, M8)alle Versionencert_bundDE
Cisco Secure Network Server Appliances <4.3(2.260020) (M5)alle Versionencert_bundDE
Cisco Secure Network Server Appliances <6.0(2.260143) (M6, M8)alle Versionencert_bundDE
Cisco Integrated Management Controller≤ UCS C-Series M7 and M8 Rack Server <4.3(6.260033)cert_bundDE
Cisco Integrated Management Controller≤ UCS C-Series M7 and M8 Rack Server <6.0(2.260044)cert_bundDE
Cisco Secure Endpoint≤ Private Cloud Appliances <4.3(6.260054) (M6)cert_bundDE
Cisco Secure Firewall Management Center≤ Appliances <4.3(2.260020) (M5)cert_bundDE
Cisco Secure Firewall Management Center≤ Appliances <6.0(2.260143) (M6, M8)cert_bundDE
Cisco Secure Network Server≤ Appliances <6.0(2.260143) (M6, M8)cert_bundDE
Cisco Secure Network Server≤ Appliances <4.3(2.260020) (M5)cert_bundDE
Cisco 4.3(1.230097)alle Versionencisco_csafUS
Cisco 4.3(1.230124)alle Versionencisco_csafUS
Cisco 4.3(1.230138)alle Versionencisco_csafUS
Cisco 4.3(2.230207)alle Versionencisco_csafUS
Cisco 4.3(2.230270)alle Versionencisco_csafUS
Cisco 4.3(2.240002)alle Versionencisco_csafUS

20 von 132 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2026-2673Cisco Integrated Management Controller: Mehrere SchwachstellenDeutsch2026-08-05csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco Integrated Management Controller ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen oder beliebigen Code mit Root-Rechten auszuführen.
cisco-sa-cimc-arg-inject-upSHdMfUCisco Integrated Management Controller Argument Injection Vulnerabilities2026-08-05csaf · cisco_csafUS
Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund cisco_csaf NVD CVE.org MITRE

veröffentlicht 2026-08-05geändert 2026-10-23

Referenzen (3)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan