CVE-2026-20288

Name of the Vulnerable Software and Affected Versions Cisco IMC (affected versions not specified)

Description An issue in the web-based management interface allows an authenticated remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system and elevate privileges to root. This occurs due to improper validation of user-supplied input, which can be exploited by entering crafted inputs into the management interface.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.