CVE-2026-20094 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command in…
High CVSS: 8.8

CVE-2026-20094

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.
Vendor
-
Product
-
CWE
CWE-77
Yayın Tarihi
2026-04-01 17:28:29
Güncelleme
2026-04-03 16:11:11
Source Identifier
psirt@cisco.com
KEV Date Added
-

Kategoriler

Referanslar