CVE-2026-20327

mediumpriority · track · 0EPSS 0.003 · 28 %ileUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.35% (28th) EPSS

CVSS 6.5 · medium

Is it mine?

35 products

Check your exposure

Who says so?

1 sources

cisco_csaf

EPSS · scored 2026-10-27

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixed10.5(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed11.0(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed11.0(2)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed11.0(3)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed11.5(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed11.6(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.0(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.5(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.5(1)SUcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.5(2)ET_CSCwi79933cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(1)_ES05_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(1)_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(2)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(2)ES6cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(2)ES7cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(2)_504_Issue_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(2)_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6(2)_Permalink_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.1_ExcelIssue_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.2_Amq_OOS_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.2_CSCwk19536_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.2_CSCwm96922_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.2_CSCwn48501_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.2_CSCwp61293_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed12.6.2_CSCwp92614_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0(1)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0(1)ES202508cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0(1)ES202511cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0(1)ES202602cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0(1)SU1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0.1_CSCwn17585_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0.1_CSCwu05225_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0.1_CSCwu53931_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.0.1_CSCwu75294_ETcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · psirt@cisco.com USexploitability 2.8 · impact 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · Cisco PSIRT US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-89US

affected products (35)

Products and version ranges known to be affected.

Cisco 10.5(1)all versionscisco_csafUS
Cisco 11.0(1)all versionscisco_csafUS
Cisco 11.0(2)all versionscisco_csafUS
Cisco 11.0(3)all versionscisco_csafUS
Cisco 11.5(1)all versionscisco_csafUS
Cisco 11.6(1)all versionscisco_csafUS
Cisco 12.0(1)all versionscisco_csafUS
Cisco 12.5(1)all versionscisco_csafUS
Cisco 12.5(1)SUall versionscisco_csafUS
Cisco 12.5(2)ET_CSCwi79933all versionscisco_csafUS
Cisco 12.6(1)all versionscisco_csafUS
Cisco 12.6(1)_ES05_ETall versionscisco_csafUS
Cisco 12.6(1)_ETall versionscisco_csafUS
Cisco 12.6(2)all versionscisco_csafUS
Cisco 12.6(2)ES6all versionscisco_csafUS
Cisco 12.6(2)ES7all versionscisco_csafUS
Cisco 12.6(2)_504_Issue_ETall versionscisco_csafUS
Cisco 12.6(2)_ETall versionscisco_csafUS
Cisco 12.6(2)_Permalink_ETall versionscisco_csafUS
Cisco 12.6.1_ExcelIssue_ETall versionscisco_csafUS

showing 20 of 35

advisories (1)

Vendor and ecosystem advisories describing this.

cisco-sa-cuic-sql-inject-2qbfWSm5Cisco Unified Intelligence Center SQL Injection Vulnerability2026-08-19csaf · cisco_csafUS
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

sources

Which sources assert this record, and when.

cisco_csaf NVD CVE.org MITRE

published 2026-08-19modified 2026-08-20

references (1) nvd

External citations — patches, advisories, analysis.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-sql-inject-2qbfWSm5

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan