CVE-2025-20261

A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated privileges. This vulnerability is due to insufficient restrictions on access to internal services. An attacker with a valid user account could exploit this vulnerability by using crafted syntax when connecting to the Cisco IMC of an affected device through SSH. A successful exploit could allow the attacker to access internal services with elevated privileges, which may allow unauthorized modifications to the system, including the possibility of creating new administrator accounts on the affected device.

• CWE-923

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-ssh-priv-esc-2mZDtdjM

Published

Jun 4, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20256A vulnerability in the web-based management interface of Cis…7.2
• CVE-2025-20257A vulnerability in an API subsystem of Cisco Secure Network …6.5
• CVE-2025-20258A vulnerability in the self-service portal of Cisco Duo coul…5.4
• CVE-2025-20259Multiple vulnerabilities in the update process of Cisco Thou…5.3
• CVE-2025-2026The NPort 6100-G2/6200-G2 Series is affected by a high-sever…7.1
• CVE-2025-20260A vulnerability in the PDF scanning processes of ClamAV coul…9.8
• CVE-2025-20262A vulnerability in the Protocol Independent Multicast Versio…5
• CVE-2025-20263A vulnerability in the web services interface of Cisco Secur…8.6
• CVE-2025-20264A vulnerability in the web-based management interface of Cis…6.4
• CVE-2025-20265A vulnerability in the RADIUS subsystem implementation of Ci…10
• CVE-2025-20267A vulnerability in the web-based management interface of Cis…4.8
• CVE-2025-20268A vulnerability in the Geolocation-Based Remote Access (RA) …5.8