CVE-2026-20097— Cisco Integrated Management Controller Remote Code Execution Vulnerability
Quick assessment
Affected
Cisco Cisco Unified Computing System (Standalone)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Integrated Management Controller（IMC）是美国思科（Cisco）公司的一套用于对UCS（统一计算系统）进行管理的软件。该软件支持HTTP、SSH访问等，并可对服务器进行开机、关机和重启等操作。 Cisco Integrated Management Controller（IMC）存在缓冲区错误漏洞，该漏洞源于基于Web的管理界面用户提供输入验证不当，可能导致具有管理员级别权限的已验证远程攻击者执行任意代码。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-20097
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Integrated Management Controller Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.
Cisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Integrated Management Controller（IMC） 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Integrated Management Controller（IMC）是美国思科（Cisco）公司的一套用于对UCS（统一计算系统）进行管理的软件。该软件支持HTTP、SSH访问等，并可对服务器进行开机、关机和重启等操作。 Cisco Integrated Management Controller（IMC）存在缓冲区错误漏洞，该漏洞源于基于Web的管理界面用户提供输入验证不当，可能导致具有管理员级别权限的已验证远程攻击者执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Unified Computing System (Standalone) | 4.0(2g) | - |
|
II. Public POCs for CVE-2026-20097
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20097
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20097 (1)
Same Patch Batch · Cisco · 2026-04-01 · 16 CVEs total
| CVE-2026-20160 | 9.8 CRITICAL | Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability |
| CVE-2026-20093 | 9.8 CRITICAL | Cisco Integrated Management Controller Authentication Bypass Vulnerability |
| CVE-2026-20094 | 8.8 HIGH | Cisco Integrated Management Controller Command Injection Vulnerability |
| CVE-2026-20155 | 8.0 HIGH | Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability |
| CVE-2026-20151 | 7.3 HIGH | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability |
| CVE-2026-20096 | 6.5 MEDIUM | Cisco Integrated Management Controller Command Injection Vulnerability |
| CVE-2026-20095 | 6.5 MEDIUM | Cisco Integrated Management Controller Command Injection Vulnerability |
| CVE-2026-20042 | 6.5 MEDIUM | Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability |
| CVE-2026-20085 | 6.1 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20041 | 6.1 MEDIUM | Cisco Nexus Dashboard Server Side Request Forgery Vulnerability |
| CVE-2026-20174 | 4.9 MEDIUM | Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability |
| CVE-2026-20090 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20089 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20087 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-20088 | 4.8 MEDIUM | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Unified Computing System (Standalone)
-
CVE-2026-20200
Cisco Integrated Management Controller Argument Injection an -
CVE-2026-20094
Cisco Integrated Management Controller Command Injection Vul -
CVE-2024-20295
Cisco Integrated Management Controller 操作系统命令注入漏洞 -
CVE-2024-20356
Cisco Integrated Management Controller 操作系统命令注入漏洞 -
CVE-2021-1397
Cisco Integrated Management Controller Open Redirect Vulnera
Same vendor: Cisco
-
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability -
CVE-2026-76447
Cisco Identity Services Engine Certificate Reload Vulnerabil
V. Comments for CVE-2026-20097
No comments yet