{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20094", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.369Z", "datePublished": "2026-04-01T16:28:50.641Z", "dateUpdated": "2026-04-01T18:17:28.241Z"}, "containers": {"cna": {"title": "Cisco Integrated Management Controller Command Injection Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.\r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt", "name": "cisco-sa-cimc-cmd-inj-3hKN3bVt"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-cimc-cmd-inj-3hKN3bVt", "discovery": "EXTERNAL", "defects": ["CSCwr60021"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "cwe", "cweId": "CWE-77"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Unified Computing System (Standalone)", "versions": [{"version": "4.0(2g)", "status": "affected"}, {"version": "3.1(2i)", "status": "affected"}, {"version": "3.1(1d)", "status": "affected"}, {"version": "4.0(4i)", "status": "affected"}, {"version": "4.1(1c)", "status": "affected"}, {"version": "4.0(2c)", "status": "affected"}, {"version": "4.0(1e)", "status": "affected"}, {"version": "4.0(2h)", "status": "affected"}, {"version": "4.0(4h)", "status": "affected"}, {"version": "4.0(1h)", "status": "affected"}, {"version": "4.0(2l)", "status": "affected"}, {"version": "3.1(3g)", "status": "affected"}, {"version": "4.0(1.240)", "status": "affected"}, {"version": "4.0(2f)", "status": "affected"}, {"version": "4.0(1g)", "status": "affected"}, {"version": "4.0(2i)", "status": "affected"}, {"version": "3.1(3i)", "status": "affected"}, {"version": "4.0(4d)", "status": "affected"}, {"version": "4.1(1d)", "status": "affected"}, {"version": "3.1(3c)", "status": "affected"}, {"version": "4.0(4k)", "status": "affected"}, {"version": "3.1(2d)", "status": "affected"}, {"version": "3.1(3a)", "status": "affected"}, {"version": "3.1(3j)", "status": "affected"}, {"version": "4.0(2d)", "status": "affected"}, {"version": "4.1(1f)", "status": "affected"}, {"version": "4.0(4j)", "status": "affected"}, {"version": "4.0(2m)", "status": "affected"}, {"version": "4.0(2k)", "status": "affected"}, {"version": "4.0(1c)", "status": "affected"}, {"version": "4.0(4f)", "status": "affected"}, {"version": "4.0(4c)", "status": "affected"}, {"version": "3.1(3d)", "status": "affected"}, {"version": "3.1(2g)", "status": "affected"}, {"version": "3.1(2c)", "status": "affected"}, {"version": "4.0(1d)", "status": "affected"}, {"version": "3.1(2e)", "status": "affected"}, {"version": "4.0(1a)", "status": "affected"}, {"version": "4.0(1b)", "status": "affected"}, {"version": "3.1(3b)", "status": "affected"}, {"version": "4.0(4b)", "status": "affected"}, {"version": "3.1(2b)", "status": "affected"}, {"version": "4.0(4e)", "status": "affected"}, {"version": "3.1(3h)", "status": "affected"}, {"version": "4.0(4l)", "status": "affected"}, {"version": "4.1(1g)", "status": "affected"}, {"version": "4.1(2a)", "status": "affected"}, {"version": "4.0(2n)", "status": "affected"}, {"version": "4.1(1h)", "status": "affected"}, {"version": "3.1(3k)", "status": "affected"}, {"version": "4.1(2b)", "status": "affected"}, {"version": "4.0(2o)", "status": "affected"}, {"version": "4.0(4m)", "status": "affected"}, {"version": "4.1(2d)", "status": "affected"}, {"version": "4.1(3b)", "status": "affected"}, {"version": "4.0(2p)", "status": "affected"}, {"version": "4.1(2e)", "status": "affected"}, {"version": "4.1(2f)", "status": "affected"}, {"version": "4.0(4n)", "status": "affected"}, {"version": "4.0(2q)", "status": "affected"}, {"version": "4.1(3c)", "status": "affected"}, {"version": "4.0(2r)", "status": "affected"}, {"version": "4.1(3d)", "status": "affected"}, {"version": "4.1(2g)", "status": "affected"}, {"version": "4.1(2h)", "status": "affected"}, {"version": "4.1(3g)", "status": "affected"}, {"version": "4.1(3f)", "status": "affected"}, {"version": "4.1(2j)", "status": "affected"}, {"version": "4.1(2k)", "status": "affected"}, {"version": "4.1(3h)", "status": "affected"}, {"version": "4.2(2a)", "status": "affected"}, {"version": "4.1(3i)", "status": "affected"}, {"version": "4.2(2f)", "status": "affected"}, {"version": "4.2(2g)", "status": "affected"}, {"version": "4.2(3b)", "status": "affected"}, {"version": "4.1(3l)", "status": "affected"}, {"version": "4.2(3d)", "status": "affected"}, {"version": "4.3(1.230097)", "status": "affected"}, {"version": "4.2(1e)", "status": "affected"}, {"version": "4.2(1b)", "status": "affected"}, {"version": "4.2(1j)", "status": "affected"}, {"version": "4.2(1i)", "status": "affected"}, {"version": "4.2(1f)", "status": "affected"}, {"version": "4.2(1a)", "status": "affected"}, {"version": "4.2(1c)", "status": "affected"}, {"version": "4.2(1g)", "status": "affected"}, {"version": "4.3(1.230124)", "status": "affected"}, {"version": "4.1(2l)", "status": "affected"}, {"version": "4.2(3e)", "status": "affected"}, {"version": "4.3(1.230138)", "status": "affected"}, {"version": "4.2(3g)", "status": "affected"}, {"version": "4.3(2.230207)", "status": "affected"}, {"version": "4.2(3h)", "status": "affected"}, {"version": "4.2(3i)", "status": "affected"}, {"version": "4.3(2.230270)", "status": "affected"}, {"version": "4.1(3m)", "status": "affected"}, {"version": "4.1(2m)", "status": "affected"}, {"version": "4.3(2.240002)", "status": "affected"}, {"version": "4.3(3.240022)", "status": "affected"}, {"version": "4.2(3j)", "status": "affected"}, {"version": "4.1(3n)", "status": "affected"}, {"version": "4.3(2.240009)", "status": "affected"}, {"version": "4.3(3.240041)", "status": "affected"}, {"version": "4.2(3k)", "status": "affected"}, {"version": "4.3(3.240043)", "status": "affected"}, {"version": "4.3(4.240142)", "status": "affected"}, {"version": "4.3(2.240037)", "status": "affected"}, {"version": "4.3(2.240053)", "status": "affected"}, {"version": "4.3(4.240152)", "status": "affected"}, {"version": "4.2(3l)", "status": "affected"}, {"version": "4.3(2.240077)", "status": "affected"}, {"version": "4.3(4.242028)", "status": "affected"}, {"version": "4.3(4.241063)", "status": "affected"}, {"version": "4.3(4.242038)", "status": "affected"}, {"version": "4.2(3m)", "status": "affected"}, {"version": "4.3(2.240090)", "status": "affected"}, {"version": "4.3(5.240021)", "status": "affected"}, {"version": "4.3(2.240107)", "status": "affected"}, {"version": "4.3(4.242066)", "status": "affected"}, {"version": "4.2(3n)", "status": "affected"}, {"version": "4.3(5.250001)", "status": "affected"}, {"version": "4.2(3o)", "status": "affected"}, {"version": "4.3(2.250016)", "status": "affected"}, {"version": "4.3(2.250021)", "status": "affected"}, {"version": "4.3(5.250030)", "status": "affected"}, {"version": "4.3(2.250022)", "status": "affected"}, {"version": "4.3(6.250039)", "status": "affected"}, {"version": "4.3(6.250040)", "status": "affected"}, {"version": "4.3(5.250033)", "status": "affected"}, {"version": "4.3(6.250044)", "status": "affected"}, {"version": "4.3(6.250053)", "status": "affected"}, {"version": "4.3(2.250037)", "status": "affected"}, {"version": "4.3(2.250045)", "status": "affected"}, {"version": "4.3(4.252001)", "status": "affected"}, {"version": "4.3(4.252002)", "status": "affected"}, {"version": "6.0(1.250127)", "status": "affected"}, {"version": "4.2(3p)", "status": "affected"}, {"version": "6.0(1.250131)", "status": "affected"}, {"version": "4.3(6.250101)", "status": "affected"}, {"version": "6.0(1.250174)", "status": "affected"}, {"version": "4.3(6.250117)", "status": "affected"}, {"version": "4.3(5.250043)", "status": "affected"}, {"version": "4.3(5.250045)", "status": "affected"}, {"version": "4.3(6.250060)", "status": "affected"}, {"version": "6.0(1.250130)", "status": "affected"}, {"version": "4.3(4.241014)", "status": "affected"}, {"version": "4.3(2.250063)", "status": "affected"}, {"version": "6.0(1.250192)", "status": "affected"}, {"version": "4.3(6.260003)", "status": "affected"}, {"version": "6.0(1.250194)", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System E-Series Software (UCSE)", "versions": [{"version": "3.2.7", "status": "affected"}, {"version": "3.2.6", "status": "affected"}, {"version": "3.2.4", "status": "affected"}, {"version": "3.2.10", "status": "affected"}, {"version": "3.2.2", "status": "affected"}, {"version": "3.2.3", "status": "affected"}, {"version": "2.4.0", "status": "affected"}, {"version": "3.2.1", "status": "affected"}, {"version": "3.2.11.1", "status": "affected"}, {"version": "3.2.8", "status": "affected"}, {"version": "3.1.1", "status": "affected"}, {"version": "3.0.2", "status": "affected"}, {"version": "2.1.0", "status": "affected"}, {"version": "2.2.2", "status": "affected"}, {"version": "3.1.2", "status": "affected"}, {"version": "3.0.1", "status": "affected"}, {"version": "2.3.2", "status": "affected"}, {"version": "2.3.5", "status": "affected"}, {"version": "2.2.1", "status": "affected"}, {"version": "3.1.4", "status": "affected"}, {"version": "2.4.1", "status": "affected"}, {"version": "2.3.1", "status": "affected"}, {"version": "3.1.3", "status": "affected"}, {"version": "2.3.3", "status": "affected"}, {"version": "2.4.2", "status": "affected"}, {"version": "3.1.5", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "2.0.0", "status": "affected"}, {"version": "3.2.11.3", "status": "affected"}, {"version": "3.2.11.5", "status": "affected"}, {"version": "3.2.12.2", "status": "affected"}, {"version": "3.2.13.6", "status": "affected"}, {"version": "3.2.14", "status": "affected"}, {"version": "4.11.1", "status": "affected"}, {"version": "3.2.15", "status": "affected"}, {"version": "4.12.1", "status": "affected"}, {"version": "3.2.15.3", "status": "affected"}, {"version": "4.12.2", "status": "affected"}, {"version": "3.2.16.1", "status": "affected"}, {"version": "4.00", "status": "affected"}, {"version": "4.15.2", "status": "affected"}, {"version": "4.02", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-04-01T16:28:50.641Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T18:17:20.302797Z", "id": "CVE-2026-20094", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T18:17:28.241Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20094", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T18:17:20.302797Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T18:17:23.337Z"}}], "cna": {"title": "Cisco Integrated Management Controller Command Injection Vulnerability", "source": {"defects": ["CSCwr60021"], "advisory": "cisco-sa-cimc-cmd-inj-3hKN3bVt", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Unified Computing System (Standalone)", "versions": [{"status": "affected", "version": "4.0(2g)"}, {"status": "affected", "version": "3.1(2i)"}, {"status": "affected", "version": "3.1(1d)"}, {"status": "affected", "version": "4.0(4i)"}, {"status": "affected", "version": "4.1(1c)"}, {"status": "affected", "version": "4.0(2c)"}, {"status": "affected", "version": "4.0(1e)"}, {"status": "affected", "version": "4.0(2h)"}, {"status": "affected", "version": "4.0(4h)"}, {"status": "affected", "version": "4.0(1h)"}, {"status": "affected", "version": "4.0(2l)"}, {"status": "affected", "version": "3.1(3g)"}, {"status": "affected", "version": "4.0(1.240)"}, {"status": "affected", "version": "4.0(2f)"}, {"status": "affected", "version": "4.0(1g)"}, {"status": "affected", "version": "4.0(2i)"}, {"status": "affected", "version": "3.1(3i)"}, {"status": "affected", "version": "4.0(4d)"}, {"status": "affected", "version": "4.1(1d)"}, {"status": "affected", "version": "3.1(3c)"}, {"status": "affected", "version": "4.0(4k)"}, {"status": "affected", "version": "3.1(2d)"}, {"status": "affected", "version": "3.1(3a)"}, {"status": "affected", "version": "3.1(3j)"}, {"status": "affected", "version": "4.0(2d)"}, {"status": "affected", "version": "4.1(1f)"}, {"status": "affected", "version": "4.0(4j)"}, {"status": "affected", "version": "4.0(2m)"}, {"status": "affected", "version": "4.0(2k)"}, {"status": "affected", "version": "4.0(1c)"}, {"status": "affected", "version": "4.0(4f)"}, {"status": "affected", "version": "4.0(4c)"}, {"status": "affected", "version": "3.1(3d)"}, {"status": "affected", "version": "3.1(2g)"}, {"status": "affected", "version": "3.1(2c)"}, {"status": "affected", "version": "4.0(1d)"}, {"status": "affected", "version": "3.1(2e)"}, {"status": "affected", "version": "4.0(1a)"}, {"status": "affected", "version": "4.0(1b)"}, {"status": "affected", "version": "3.1(3b)"}, {"status": "affected", "version": "4.0(4b)"}, {"status": "affected", "version": "3.1(2b)"}, {"status": "affected", "version": "4.0(4e)"}, {"status": "affected", "version": "3.1(3h)"}, {"status": "affected", "version": "4.0(4l)"}, {"status": "affected", "version": "4.1(1g)"}, {"status": "affected", "version": "4.1(2a)"}, {"status": "affected", "version": "4.0(2n)"}, {"status": "affected", "version": "4.1(1h)"}, {"status": "affected", "version": "3.1(3k)"}, {"status": "affected", "version": "4.1(2b)"}, {"status": "affected", "version": "4.0(2o)"}, {"status": "affected", "version": "4.0(4m)"}, {"status": "affected", "version": "4.1(2d)"}, {"status": "affected", "version": "4.1(3b)"}, {"status": "affected", "version": "4.0(2p)"}, {"status": "affected", "version": "4.1(2e)"}, {"status": "affected", "version": "4.1(2f)"}, {"status": "affected", "version": "4.0(4n)"}, {"status": "affected", "version": "4.0(2q)"}, {"status": "affected", "version": "4.1(3c)"}, {"status": "affected", "version": "4.0(2r)"}, {"status": "affected", "version": "4.1(3d)"}, {"status": "affected", "version": "4.1(2g)"}, {"status": "affected", "version": "4.1(2h)"}, {"status": "affected", "version": "4.1(3g)"}, {"status": "affected", "version": "4.1(3f)"}, {"status": "affected", "version": "4.1(2j)"}, {"status": "affected", "version": "4.1(2k)"}, {"status": "affected", "version": "4.1(3h)"}, {"status": "affected", "version": "4.2(2a)"}, {"status": "affected", "version": "4.1(3i)"}, {"status": "affected", "version": "4.2(2f)"}, {"status": "affected", "version": "4.2(2g)"}, {"status": "affected", "version": "4.2(3b)"}, {"status": "affected", "version": "4.1(3l)"}, {"status": "affected", "version": "4.2(3d)"}, {"status": "affected", "version": "4.3(1.230097)"}, {"status": "affected", "version": "4.2(1e)"}, {"status": "affected", "version": "4.2(1b)"}, {"status": "affected", "version": "4.2(1j)"}, {"status": "affected", "version": "4.2(1i)"}, {"status": "affected", "version": "4.2(1f)"}, {"status": "affected", "version": "4.2(1a)"}, {"status": "affected", "version": "4.2(1c)"}, {"status": "affected", "version": "4.2(1g)"}, {"status": "affected", "version": "4.3(1.230124)"}, {"status": "affected", "version": "4.1(2l)"}, {"status": "affected", "version": "4.2(3e)"}, {"status": "affected", "version": "4.3(1.230138)"}, {"status": "affected", "version": "4.2(3g)"}, {"status": "affected", "version": "4.3(2.230207)"}, {"status": "affected", "version": "4.2(3h)"}, {"status": "affected", "version": "4.2(3i)"}, {"status": "affected", "version": "4.3(2.230270)"}, {"status": "affected", "version": "4.1(3m)"}, {"status": "affected", "version": "4.1(2m)"}, {"status": "affected", "version": "4.3(2.240002)"}, {"status": "affected", "version": "4.3(3.240022)"}, {"status": "affected", "version": "4.2(3j)"}, {"status": "affected", "version": "4.1(3n)"}, {"status": "affected", "version": "4.3(2.240009)"}, {"status": "affected", "version": "4.3(3.240041)"}, {"status": "affected", "version": "4.2(3k)"}, {"status": "affected", "version": "4.3(3.240043)"}, {"status": "affected", "version": "4.3(4.240142)"}, {"status": "affected", "version": "4.3(2.240037)"}, {"status": "affected", "version": "4.3(2.240053)"}, {"status": "affected", "version": "4.3(4.240152)"}, {"status": "affected", "version": "4.2(3l)"}, {"status": "affected", "version": "4.3(2.240077)"}, {"status": "affected", "version": "4.3(4.242028)"}, {"status": "affected", "version": "4.3(4.241063)"}, {"status": "affected", "version": "4.3(4.242038)"}, {"status": "affected", "version": "4.2(3m)"}, {"status": "affected", "version": "4.3(2.240090)"}, {"status": "affected", "version": "4.3(5.240021)"}, {"status": "affected", "version": "4.3(2.240107)"}, {"status": "affected", "version": "4.3(4.242066)"}, {"status": "affected", "version": "4.2(3n)"}, {"status": "affected", "version": "4.3(5.250001)"}, {"status": "affected", "version": "4.2(3o)"}, {"status": "affected", "version": "4.3(2.250016)"}, {"status": "affected", "version": "4.3(2.250021)"}, {"status": "affected", "version": "4.3(5.250030)"}, {"status": "affected", "version": "4.3(2.250022)"}, {"status": "affected", "version": "4.3(6.250039)"}, {"status": "affected", "version": "4.3(6.250040)"}, {"status": "affected", "version": "4.3(5.250033)"}, {"status": "affected", "version": "4.3(6.250044)"}, {"status": "affected", "version": "4.3(6.250053)"}, {"status": "affected", "version": "4.3(2.250037)"}, {"status": "affected", "version": "4.3(2.250045)"}, {"status": "affected", "version": "4.3(4.252001)"}, {"status": "affected", "version": "4.3(4.252002)"}, {"status": "affected", "version": "6.0(1.250127)"}, {"status": "affected", "version": "4.2(3p)"}, {"status": "affected", "version": "6.0(1.250131)"}, {"status": "affected", "version": "4.3(6.250101)"}, {"status": "affected", "version": "6.0(1.250174)"}, {"status": "affected", "version": "4.3(6.250117)"}, {"status": "affected", "version": "4.3(5.250043)"}, {"status": "affected", "version": "4.3(5.250045)"}, {"status": "affected", "version": "4.3(6.250060)"}, {"status": "affected", "version": "6.0(1.250130)"}, {"status": "affected", "version": "4.3(4.241014)"}, {"status": "affected", "version": "4.3(2.250063)"}, {"status": "affected", "version": "6.0(1.250192)"}, {"status": "affected", "version": "4.3(6.260003)"}, {"status": "affected", "version": "6.0(1.250194)"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Unified Computing System E-Series Software (UCSE)", "versions": [{"status": "affected", "version": "3.2.7"}, {"status": "affected", "version": "3.2.6"}, {"status": "affected", "version": "3.2.4"}, {"status": "affected", "version": "3.2.10"}, {"status": "affected", "version": "3.2.2"}, {"status": "affected", "version": "3.2.3"}, {"status": "affected", "version": "2.4.0"}, {"status": "affected", "version": "3.2.1"}, {"status": "affected", "version": "3.2.11.1"}, {"status": "affected", "version": "3.2.8"}, {"status": "affected", "version": "3.1.1"}, {"status": "affected", "version": "3.0.2"}, {"status": "affected", "version": "2.1.0"}, {"status": "affected", "version": "2.2.2"}, {"status": "affected", "version": "3.1.2"}, {"status": "affected", "version": "3.0.1"}, {"status": "affected", "version": "2.3.2"}, {"status": "affected", "version": "2.3.5"}, {"status": "affected", "version": "2.2.1"}, {"status": "affected", "version": "3.1.4"}, {"status": "affected", "version": "2.4.1"}, {"status": "affected", "version": "2.3.1"}, {"status": "affected", "version": "3.1.3"}, {"status": "affected", "version": "2.3.3"}, {"status": "affected", "version": "2.4.2"}, {"status": "affected", "version": "3.1.5"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "2.0.0"}, {"status": "affected", "version": "3.2.11.3"}, {"status": "affected", "version": "3.2.11.5"}, {"status": "affected", "version": "3.2.12.2"}, {"status": "affected", "version": "3.2.13.6"}, {"status": "affected", "version": "3.2.14"}, {"status": "affected", "version": "4.11.1"}, {"status": "affected", "version": "3.2.15"}, {"status": "affected", "version": "4.12.1"}, {"status": "affected", "version": "3.2.15.3"}, {"status": "affected", "version": "4.12.2"}, {"status": "affected", "version": "3.2.16.1"}, {"status": "affected", "version": "4.00"}, {"status": "affected", "version": "4.15.2"}, {"status": "affected", "version": "4.02"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt", "name": "cisco-sa-cimc-cmd-inj-3hKN3bVt"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.\r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-77", "description": "Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-04-01T16:28:50.641Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20094", "state": "PUBLISHED", "dateUpdated": "2026-04-01T18:17:28.241Z", "dateReserved": "2025-10-08T11:59:15.369Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-04-01T16:28:50.641Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.\r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user."}], "id": "CVE-2026-20094", "lastModified": "2026-04-01T17:28:29.230", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "psirt@cisco.com", "type": "Primary"}]}, "published": "2026-04-01T17:28:29.230", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "psirt@cisco.com", "type": "Primary"}]}

{}

{}