Files
vuln-cve/data/2026/20xxx/CVE-2026-20288.json
T

1152 lines
44 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-20288",
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"state": "PUBLISHED",
"assignerShortName": "cisco",
"dateReserved": "2025-10-08T11:59:15.405Z",
"datePublished": "2026-08-05T16:27:53.491Z",
"dateUpdated": "2026-09-16T03:56:59.753Z"
},
"containers": {
"cna": {
"title": "Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability",
"metrics": [
{
"format": "cvssV3_1",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
}
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. \r\n\r\nThis vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by entering crafted inputs to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user. \r\nCisco has assigned this vulnerability a SIR of High rather than Medium as the score indicates because additional security implications could occur when the attacker becomes root."
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-arg-inject-upSHdMfU",
"name": "cisco-sa-cimc-arg-inject-upSHdMfU"
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is aware that proof-of-concept exploit code is available for CVE-2026-20200.\r\n\r\nThe Cisco PSIRT is not aware of any malicious use of the vulnerabilities that are described in this advisory."
}
],
"source": {
"advisory": "cisco-sa-cimc-arg-inject-upSHdMfU",
"discovery": "EXTERNAL",
"defects": [
"CSCwt45063"
]
},
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Improper Neutralization of Expression/Command Delimiters",
"type": "cwe",
"cweId": "CWE-146"
}
]
}
],
"affected": [
{
"vendor": "Cisco",
"product": "Cisco Enterprise NFV Infrastructure Software",
"versions": [
{
"version": "4.1.1",
"status": "affected"
},
{
"version": "3.9.1",
"status": "affected"
},
{
"version": "3.5.2",
"status": "affected"
},
{
"version": "3.12.2",
"status": "affected"
},
{
"version": "3.6.2",
"status": "affected"
},
{
"version": "3.9.2",
"status": "affected"
},
{
"version": "3.11.3",
"status": "affected"
},
{
"version": "3.11.1",
"status": "affected"
},
{
"version": "3.5.1",
"status": "affected"
},
{
"version": "3.3.1",
"status": "affected"
},
{
"version": "3.10.2",
"status": "affected"
},
{
"version": "3.12.1b",
"status": "affected"
},
{
"version": "3.4.1",
"status": "affected"
},
{
"version": "3.12.1a",
"status": "affected"
},
{
"version": "3.6.3",
"status": "affected"
},
{
"version": "3.8.1",
"status": "affected"
},
{
"version": "3.11.2",
"status": "affected"
},
{
"version": "3.12.1",
"status": "affected"
},
{
"version": "3.12.3",
"status": "affected"
},
{
"version": "3.10.1",
"status": "affected"
},
{
"version": "3.6.1",
"status": "affected"
},
{
"version": "3.10.3",
"status": "affected"
},
{
"version": "3.7.1",
"status": "affected"
},
{
"version": "4.1.2",
"status": "affected"
},
{
"version": "4.2.1",
"status": "affected"
},
{
"version": "4.2.2",
"status": "affected"
},
{
"version": "4.4.1",
"status": "affected"
},
{
"version": "4.4.2",
"status": "affected"
},
{
"version": "4.5.1",
"status": "affected"
},
{
"version": "4.4.3",
"status": "affected"
},
{
"version": "4.6.1",
"status": "affected"
},
{
"version": "4.7.1",
"status": "affected"
},
{
"version": "4.6.2-FC2",
"status": "affected"
},
{
"version": "4.6.2",
"status": "affected"
},
{
"version": "4.8.1",
"status": "affected"
},
{
"version": "4.8.2",
"status": "affected"
},
{
"version": "4.9.1",
"status": "affected"
},
{
"version": "4.6.3",
"status": "affected"
},
{
"version": "4.9.2",
"status": "affected"
},
{
"version": "4.10.1",
"status": "affected"
},
{
"version": "4.9.3",
"status": "affected"
},
{
"version": "4.11.1",
"status": "affected"
},
{
"version": "4.9.4",
"status": "affected"
},
{
"version": "4.12.1",
"status": "affected"
},
{
"version": "4.6.4",
"status": "affected"
},
{
"version": "4.12.2",
"status": "affected"
},
{
"version": "4.13.1",
"status": "affected"
},
{
"version": "4.9.5",
"status": "affected"
},
{
"version": "4.12.3",
"status": "affected"
},
{
"version": "4.14.1",
"status": "affected"
},
{
"version": "4.6.3-FC4",
"status": "affected"
},
{
"version": "4.9.4-FC3",
"status": "affected"
},
{
"version": "4.12.4",
"status": "affected"
},
{
"version": "4.15.1",
"status": "affected"
},
{
"version": "4.9.6",
"status": "affected"
},
{
"version": "4.15.2",
"status": "affected"
},
{
"version": "4.12.5",
"status": "affected"
},
{
"version": "4.15.3",
"status": "affected"
},
{
"version": "4.15.4",
"status": "affected"
},
{
"version": "4.12.6",
"status": "affected"
},
{
"version": "4.15.5",
"status": "affected"
},
{
"version": "4.12.7",
"status": "affected"
},
{
"version": "4.18.3",
"status": "affected"
},
{
"version": "26.1.1",
"status": "affected"
},
{
"version": "4.18.4",
"status": "affected"
},
{
"version": "4.16.1",
"status": "affected"
},
{
"version": "4.18.2a",
"status": "affected"
},
{
"version": "4.18.1",
"status": "affected"
},
{
"version": "4.18.2",
"status": "affected"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System (Standalone)",
"versions": [
{
"version": "4.0(2g)",
"status": "affected"
},
{
"version": "3.1(2i)",
"status": "affected"
},
{
"version": "3.1(1d)",
"status": "affected"
},
{
"version": "4.0(4i)",
"status": "affected"
},
{
"version": "4.1(1c)",
"status": "affected"
},
{
"version": "4.0(2c)",
"status": "affected"
},
{
"version": "4.0(1e)",
"status": "affected"
},
{
"version": "4.0(2h)",
"status": "affected"
},
{
"version": "4.0(4h)",
"status": "affected"
},
{
"version": "4.0(1h)",
"status": "affected"
},
{
"version": "4.0(2l)",
"status": "affected"
},
{
"version": "3.1(3g)",
"status": "affected"
},
{
"version": "4.0(1.240)",
"status": "affected"
},
{
"version": "4.0(2f)",
"status": "affected"
},
{
"version": "4.0(1g)",
"status": "affected"
},
{
"version": "4.0(2i)",
"status": "affected"
},
{
"version": "3.1(3i)",
"status": "affected"
},
{
"version": "4.0(4d)",
"status": "affected"
},
{
"version": "4.1(1d)",
"status": "affected"
},
{
"version": "3.1(3c)",
"status": "affected"
},
{
"version": "4.0(4k)",
"status": "affected"
},
{
"version": "3.1(2d)",
"status": "affected"
},
{
"version": "3.1(3a)",
"status": "affected"
},
{
"version": "3.1(3j)",
"status": "affected"
},
{
"version": "4.0(2d)",
"status": "affected"
},
{
"version": "4.1(1f)",
"status": "affected"
},
{
"version": "4.0(4j)",
"status": "affected"
},
{
"version": "4.0(2m)",
"status": "affected"
},
{
"version": "4.0(2k)",
"status": "affected"
},
{
"version": "4.0(1c)",
"status": "affected"
},
{
"version": "4.0(4f)",
"status": "affected"
},
{
"version": "4.0(4c)",
"status": "affected"
},
{
"version": "3.1(3d)",
"status": "affected"
},
{
"version": "3.1(2g)",
"status": "affected"
},
{
"version": "3.1(2c)",
"status": "affected"
},
{
"version": "4.0(1d)",
"status": "affected"
},
{
"version": "3.1(2e)",
"status": "affected"
},
{
"version": "4.0(1a)",
"status": "affected"
},
{
"version": "4.0(1b)",
"status": "affected"
},
{
"version": "3.1(3b)",
"status": "affected"
},
{
"version": "4.0(4b)",
"status": "affected"
},
{
"version": "3.1(2b)",
"status": "affected"
},
{
"version": "4.0(4e)",
"status": "affected"
},
{
"version": "3.1(3h)",
"status": "affected"
},
{
"version": "4.0(4l)",
"status": "affected"
},
{
"version": "4.1(1g)",
"status": "affected"
},
{
"version": "4.1(2a)",
"status": "affected"
},
{
"version": "4.0(2n)",
"status": "affected"
},
{
"version": "4.1(1h)",
"status": "affected"
},
{
"version": "3.1(3k)",
"status": "affected"
},
{
"version": "4.1(2b)",
"status": "affected"
},
{
"version": "4.0(2o)",
"status": "affected"
},
{
"version": "4.0(4m)",
"status": "affected"
},
{
"version": "4.1(2d)",
"status": "affected"
},
{
"version": "4.1(3b)",
"status": "affected"
},
{
"version": "4.0(2p)",
"status": "affected"
},
{
"version": "4.1(2e)",
"status": "affected"
},
{
"version": "4.1(2f)",
"status": "affected"
},
{
"version": "4.0(4n)",
"status": "affected"
},
{
"version": "4.0(2q)",
"status": "affected"
},
{
"version": "4.1(3c)",
"status": "affected"
},
{
"version": "4.0(2r)",
"status": "affected"
},
{
"version": "4.1(3d)",
"status": "affected"
},
{
"version": "4.1(2g)",
"status": "affected"
},
{
"version": "4.1(2h)",
"status": "affected"
},
{
"version": "4.1(3g)",
"status": "affected"
},
{
"version": "4.1(3f)",
"status": "affected"
},
{
"version": "4.1(2j)",
"status": "affected"
},
{
"version": "4.1(2k)",
"status": "affected"
},
{
"version": "4.1(3h)",
"status": "affected"
},
{
"version": "4.2(2a)",
"status": "affected"
},
{
"version": "4.1(3i)",
"status": "affected"
},
{
"version": "4.2(2f)",
"status": "affected"
},
{
"version": "4.2(2g)",
"status": "affected"
},
{
"version": "4.2(3b)",
"status": "affected"
},
{
"version": "4.1(3l)",
"status": "affected"
},
{
"version": "4.2(3d)",
"status": "affected"
},
{
"version": "4.3(1.230097)",
"status": "affected"
},
{
"version": "4.2(1e)",
"status": "affected"
},
{
"version": "4.2(1b)",
"status": "affected"
},
{
"version": "4.2(1j)",
"status": "affected"
},
{
"version": "4.2(1i)",
"status": "affected"
},
{
"version": "4.2(1f)",
"status": "affected"
},
{
"version": "4.2(1a)",
"status": "affected"
},
{
"version": "4.2(1c)",
"status": "affected"
},
{
"version": "4.2(1g)",
"status": "affected"
},
{
"version": "4.3(1.230124)",
"status": "affected"
},
{
"version": "4.1(2l)",
"status": "affected"
},
{
"version": "4.2(3e)",
"status": "affected"
},
{
"version": "4.3(1.230138)",
"status": "affected"
},
{
"version": "4.2(3g)",
"status": "affected"
},
{
"version": "4.3(2.230207)",
"status": "affected"
},
{
"version": "4.2(3h)",
"status": "affected"
},
{
"version": "4.2(3i)",
"status": "affected"
},
{
"version": "4.3(2.230270)",
"status": "affected"
},
{
"version": "4.1(3m)",
"status": "affected"
},
{
"version": "4.1(2m)",
"status": "affected"
},
{
"version": "4.3(2.240002)",
"status": "affected"
},
{
"version": "4.3(3.240022)",
"status": "affected"
},
{
"version": "4.2(3j)",
"status": "affected"
},
{
"version": "4.1(3n)",
"status": "affected"
},
{
"version": "4.3(2.240009)",
"status": "affected"
},
{
"version": "4.3(3.240041)",
"status": "affected"
},
{
"version": "4.2(3k)",
"status": "affected"
},
{
"version": "4.3(3.240043)",
"status": "affected"
},
{
"version": "4.3(4.240142)",
"status": "affected"
},
{
"version": "4.3(2.240037)",
"status": "affected"
},
{
"version": "4.3(2.240053)",
"status": "affected"
},
{
"version": "4.3(4.240152)",
"status": "affected"
},
{
"version": "4.2(3l)",
"status": "affected"
},
{
"version": "4.3(2.240077)",
"status": "affected"
},
{
"version": "4.3(4.242028)",
"status": "affected"
},
{
"version": "4.3(4.241063)",
"status": "affected"
},
{
"version": "4.3(4.242038)",
"status": "affected"
},
{
"version": "4.2(3m)",
"status": "affected"
},
{
"version": "4.3(2.240090)",
"status": "affected"
},
{
"version": "4.3(5.240021)",
"status": "affected"
},
{
"version": "4.3(2.240107)",
"status": "affected"
},
{
"version": "4.3(4.242066)",
"status": "affected"
},
{
"version": "4.2(3n)",
"status": "affected"
},
{
"version": "4.3(5.250001)",
"status": "affected"
},
{
"version": "4.2(3o)",
"status": "affected"
},
{
"version": "4.3(2.250016)",
"status": "affected"
},
{
"version": "4.3(2.250021)",
"status": "affected"
},
{
"version": "4.3(5.250030)",
"status": "affected"
},
{
"version": "4.3(2.250022)",
"status": "affected"
},
{
"version": "4.3(6.250039)",
"status": "affected"
},
{
"version": "4.3(6.250040)",
"status": "affected"
},
{
"version": "4.3(5.250033)",
"status": "affected"
},
{
"version": "4.3(6.250044)",
"status": "affected"
},
{
"version": "4.3(6.250053)",
"status": "affected"
},
{
"version": "4.3(2.250037)",
"status": "affected"
},
{
"version": "4.3(2.250045)",
"status": "affected"
},
{
"version": "4.3(4.252001)",
"status": "affected"
},
{
"version": "4.3(4.252002)",
"status": "affected"
},
{
"version": "6.0(1.250127)",
"status": "affected"
},
{
"version": "4.2(3p)",
"status": "affected"
},
{
"version": "6.0(1.250131)",
"status": "affected"
},
{
"version": "4.3(6.250101)",
"status": "affected"
},
{
"version": "6.0(1.250174)",
"status": "affected"
},
{
"version": "4.3(6.250117)",
"status": "affected"
},
{
"version": "4.3(5.250043)",
"status": "affected"
},
{
"version": "4.3(5.250045)",
"status": "affected"
},
{
"version": "4.3(6.250060)",
"status": "affected"
},
{
"version": "6.0(1.250130)",
"status": "affected"
},
{
"version": "4.3(4.241014)",
"status": "affected"
},
{
"version": "4.3(2.250063)",
"status": "affected"
},
{
"version": "6.0(1.250192)",
"status": "affected"
},
{
"version": "4.3(6.260003)",
"status": "affected"
},
{
"version": "6.0(1.250194)",
"status": "affected"
},
{
"version": "4.3(6.260017)",
"status": "affected"
},
{
"version": "4.3(2.260007)",
"status": "affected"
},
{
"version": "6.0(2.260044)",
"status": "affected"
},
{
"version": "6.0(2.260069)",
"status": "affected"
},
{
"version": "4.3(6.260033)",
"status": "affected"
},
{
"version": "4.2(3q)",
"status": "affected"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Cisco",
"product": "Cisco Unified Computing System E-Series Software (UCSE)",
"versions": [
{
"version": "3.2.7",
"status": "affected"
},
{
"version": "3.2.6",
"status": "affected"
},
{
"version": "3.2.4",
"status": "affected"
},
{
"version": "3.2.10",
"status": "affected"
},
{
"version": "3.2.2",
"status": "affected"
},
{
"version": "3.2.3",
"status": "affected"
},
{
"version": "3.2.1",
"status": "affected"
},
{
"version": "3.2.11.1",
"status": "affected"
},
{
"version": "3.2.8",
"status": "affected"
},
{
"version": "3.1.1",
"status": "affected"
},
{
"version": "3.1.2",
"status": "affected"
},
{
"version": "3.1.4",
"status": "affected"
},
{
"version": "3.1.3",
"status": "affected"
},
{
"version": "3.1.5",
"status": "affected"
},
{
"version": "3.1.0",
"status": "affected"
},
{
"version": "3.2.11.3",
"status": "affected"
},
{
"version": "3.2.11.5",
"status": "affected"
},
{
"version": "3.2.12.2",
"status": "affected"
},
{
"version": "3.2.13.6",
"status": "affected"
},
{
"version": "3.2.14",
"status": "affected"
},
{
"version": "4.11.1",
"status": "affected"
},
{
"version": "3.2.15",
"status": "affected"
},
{
"version": "4.12.1",
"status": "affected"
},
{
"version": "3.2.15.3",
"status": "affected"
},
{
"version": "4.12.2",
"status": "affected"
},
{
"version": "3.2.16.1",
"status": "affected"
},
{
"version": "4.15.2",
"status": "affected"
},
{
"version": "3.2.17.1",
"status": "affected"
},
{
"version": "4.15.3",
"status": "affected"
}
],
"defaultStatus": "unknown"
}
],
"providerMetadata": {
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco",
"dateUpdated": "2026-09-16T03:56:59.753Z"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-08-05T00:00:00+00:00",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3",
"id": "CVE-2026-20288"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-08-06T03:55:30.370Z"
}
}
]
}
}