CVE-2026-20094
Last modified
CVE-2026-20094 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Unified Computing System (Standalone) | 4.0(2g); 3.1(2i); 3.1(1d); 4.0(4i); 4.1(1c); 4.0(2c); 4.0(1e); 4.0(2h); 4.0(4h); 4.0(1h); 4.0(2l); 3.1(3g); 4.0(1.240); 4.0(2f); 4.0(1g); 4.0(2i); 3.1(3i); 4.0(4d); 4.1(1d); 3.1(3c); 4.0(4k); 3.1(2d); 3.1(3a); 3.1(3j); 4.0(2d); 4.1(1f); 4.0(4j); 4.0(2m); 4.0(2k); 4.0(1c); 4.0(4f); 4.0(4c); 3.1(3d); 3.1(2g); 3.1(2c); 4.0(1d); 3.1(2e); 4.0(1a); 4.0(1b); 3.1(3b); 4.0(4b); 3.1(2b); 4.0(4e); 3.1(3h); 4.0(4l); 4.1(1g); 4.1(2a); 4.0(2n); 4.1(1h); 3.1(3k); 4.1(2b); 4.0(2o); 4.0(4m); 4.1(2d); 4.1(3b); 4.0(2p); 4.1(2e); 4.1(2f); 4.0(4n); 4.0(2q); 4.1(3c); 4.0(2r); 4.1(3d); 4.1(2g); 4.1(2h); 4.1(3g); 4.1(3f); 4.1(2j); 4.1(2k); 4.1(3h); 4.2(2a); 4.1(3i); 4.2(2f); 4.2(2g); 4.2(3b); 4.1(3l); 4.2(3d); 4.3(1.230097); 4.2(1e); 4.2(1b); 4.2(1j); 4.2(1i); 4.2(1f); 4.2(1a); 4.2(1c); 4.2(1g); 4.3(1.230124); 4.1(2l); 4.2(3e); 4.3(1.230138); 4.2(3g); 4.3(2.230207); 4.2(3h); 4.2(3i); 4.3(2.230270); 4.1(3m); 4.1(2m); 4.3(2.240002); 4.3(3.240022); 4.2(3j); 4.1(3n); 4.3(2.240009); 4.3(3.240041); 4.2(3k); 4.3(3.240043); 4.3(4.240142); 4.3(2.240037); 4.3(2.240053); 4.3(4.240152); 4.2(3l); 4.3(2.240077); 4.3(4.242028); 4.3(4.241063); 4.3(4.242038); 4.2(3m); 4.3(2.240090); 4.3(5.240021); 4.3(2.240107); 4.3(4.242066); 4.2(3n); 4.3(5.250001); 4.2(3o); 4.3(2.250016); 4.3(2.250021); 4.3(5.250030); 4.3(2.250022); 4.3(6.250039); 4.3(6.250040); 4.3(5.250033); 4.3(6.250044); 4.3(6.250053); 4.3(2.250037); 4.3(2.250045); 4.3(4.252001); 4.3(4.252002); 6.0(1.250127); 4.2(3p); 6.0(1.250131); 4.3(6.250101); 6.0(1.250174); 4.3(6.250117); 4.3(5.250043); 4.3(5.250045); 4.3(6.250060); 6.0(1.250130); 4.3(4.241014); 4.3(2.250063); 6.0(1.250192); 4.3(6.260003); 6.0(1.250194) |
| Cisco | Cisco Unified Computing System E-Series Software (UCSE) | 3.2.7; 3.2.6; 3.2.4; 3.2.10; 3.2.2; 3.2.3; 2.4.0; 3.2.1; 3.2.11.1; 3.2.8; 3.1.1; 3.0.2; 2.1.0; 2.2.2; 3.1.2; 3.0.1; 2.3.2; 2.3.5; 2.2.1; 3.1.4; 2.4.1; 2.3.1; 3.1.3; 2.3.3; 2.4.2; 3.1.5; 3.1.0; 2.0.0; 3.2.11.3; 3.2.11.5; 3.2.12.2; 3.2.13.6; 3.2.14; 4.11.1; 3.2.15; 4.12.1; 3.2.15.3; 4.12.2; 3.2.16.1; 4.00; 4.15.2; 4.02 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-20094?
How severe is CVE-2026-20094?
How do I fix CVE-2026-20094?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-20089A vulnerability in the web-based management interface of Cis…4.8
- CVE-2026-2009A flaw has been found in SourceCodester Gas Agency Managemen…6.5
- CVE-2026-20090A vulnerability in the web-based management interface of Cis…4.8
- CVE-2026-20091A vulnerability in the web-based management interface of Cis…4.8
- CVE-2026-20092A vulnerability in the read-only maintenance shell of Cisco …6
- CVE-2026-20093A vulnerability in the change password functionality of Cisc…9.8
- CVE-2026-20095A vulnerability in the web-based management interface of Cis…6.5
- CVE-2026-20096A vulnerability in the web-based management interface of Cis…6.5
- CVE-2026-20097A vulnerability in the web-based management interface of Cis…6.5
- CVE-2026-20098A vulnerability in the Certificate Management feature of Cis…8.8
- CVE-2026-20099A vulnerability in the web-based management interface of Cis…6.7
- CVE-2026-2010A vulnerability has been found in Sanluan PublicCMS up to 4.…4.2
Are you affected by CVE-2026-20094?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST