CVE-2026-20200

{"id": "CVE-2026-20200", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20200", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-05T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Unified Computing System (Standalone)", "versions": [{"status": "affected", "version": "4.3(1.230097)"}, {"status": "affected", "version": "4.3(1.230124)"}, {"status": "affected", "version": "4.3(1.230138)"}, {"status": "affected", "version": "4.3(2.230207)"}, {"status": "affected", "version": "4.3(2.230270)"}, {"status": "affected", "version": "4.3(2.240002)"}, {"status": "affected", "version": "4.3(3.240022)"}, {"status": "affected", "version": "4.3(3.240043)"}, {"status": "affected", "version": "4.3(4.240142)"}, {"status": "affected", "version": "4.3(4.240152)"}, {"status": "affected", "version": "4.3(4.242028)"}, {"status": "affected", "version": "4.3(4.241063)"}, {"status": "affected", "version": "4.3(4.242038)"}, {"status": "affected", "version": "4.3(5.240021)"}, {"status": "affected", "version": "4.3(4.242066)"}, {"status": "affected", "version": "4.3(5.250001)"}, {"status": "affected", "version": "4.3(5.250030)"}, {"status": "affected", "version": "4.3(6.250040)"}, {"status": "affected", "version": "4.3(5.250033)"}, {"status": "affected", "version": "4.3(6.250044)"}, {"status": "affected", "version": "4.3(6.250053)"}, {"status": "affected", "version": "4.3(4.252001)"}, {"status": "affected", "version": "4.3(4.252002)"}, {"status": "affected", "version": "6.0(1.250127)"}, {"status": "affected", "version": "6.0(1.250131)"}, {"status": "affected", "version": "4.3(6.250101)"}, {"status": "affected", "version": "6.0(1.250174)"}, {"status": "affected", "version": "4.3(6.250117)"}, {"status": "affected", "version": "4.3(5.250043)"}, {"status": "affected", "version": "4.3(6.250039)"}, {"status": "affected", "version": "4.3(5.250045)"}, {"status": "affected", "version": "4.3(6.250060)"}, {"status": "affected", "version": "6.0(1.250130)"}, {"status": "affected", "version": "4.3(4.241014)"}, {"status": "affected", "version": "6.0(1.250192)"}, {"status": "affected", "version": "4.3(6.260003)"}, {"status": "affected", "version": "6.0(1.250194)"}, {"status": "affected", "version": "4.3(6.260017)"}], "defaultStatus": "unknown"}]}], "published": "2026-08-05T17:16:47.180", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-141"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. \r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. "}], "lastModified": "2026-08-31T20:35:43.247", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230097\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "707943EC-B4E1-402E-93F2-61155E9D9A7B"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230124\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC28F760-C39D-4FD4-AC70-8CEC9ECDA554"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(1.230138\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA121B58-42FC-4AAA-BDA8-94D0D6F73EB1"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.230207\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67EA5B96-4C34-430D-91A1-E599EDBC5375"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.230270\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A81EEB35-D849-48C8-880F-44586EADA1CF"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(2.240002\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82D66234-EF8F-41B7-A5D4-0CA5D48793EE"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(3.240022\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B514BF97-4D5F-41EB-8A2F-61C7872CBE5A"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(3.240043\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50F49E6F-229D-4179-8CE9-907D6A33466C"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.240142\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60A65978-E02D-4D06-A75F-45314FE839D3"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.240152\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E341DE8-C1B3-4781-9317-50C3003AB5FD"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.241014\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93A935AB-601E-4FFD-9D86-868389D8F9F4"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.241063\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DDEC37C-56DF-4E48-9460-0C1DB42A4D3C"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242028\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC737A47-3CE9-4023-99D5-D7A2DCAA41FB"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242038\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "288C568D-AA87-4FF2-A581-4D5CD33B820B"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.242066\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8DE4607-D9BC-4717-9394-9BD4327ADBDB"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.252001\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A35D000-58B6-435A-86DE-EE179A99513F"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(4.252002\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1DDEA92-C6E3-4046-983E-A8031BC6C690"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.240021\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5293950E-970F-4542-8ADD-9D1692D4C9EE"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250001\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E70EC20-7CDB-4DD4-8F1D-2DCDF5DBD147"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250030\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0DA7140-AB72-4215-995E-956D35669766"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250033\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A62E579-B113-40A5-A497-92A80CC91F2E"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250043\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A424479-9816-4A4B-A9CA-1349FD016FEC"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(5.250045\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B92AB187-9C5E-42A6-B1FD-219116583914"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250039\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CBF1228-D8D8-4FAF-9986-55B8D4C5B3B2"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250040\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B40F8FD-19AD-4726-B2E9-DAD09394970E"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250044\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7D0F9CB-0B4C-4680-BCFF-E80633DCD3F7"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250053\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D9E7A5F-99AE-4F34-867B-931C4B880E61"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250060\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85DDCB2E-396C-4B4B-9F06-2B3E36045EC4"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250101\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1705D6C-69F7-4492-A4AF-09BFCA820286"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.250117\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B51CAF4B-0BCD-4DAF-8774-94212B1E357D"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.260003\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24114854-41E9-4E3C-813D-A006FCA7E585"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:4.3\\(6.260017\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DD2F3BC-D516-4E57-A455-8A3995C8872B"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250127\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "897DDFB9-DF7A-4455-9D5F-17305920AB76"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250130\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8B7A2A76-A5EE-4975-A735-3BCC6C89EF8D"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250131\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "437298D0-C839-43E4-8FE1-7CB0977FB8C4"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250174\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41B1F1F7-915D-4CC8-9DCF-200D84872C81"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250192\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25CF81F3-6576-45F1-97AE-9AA21D5575E0"}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:6.0\\(1.250194\\):*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63A1580D-A644-4F4C-B41E-5D97273CB6A6"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}