nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-20093 CVE-2026-20093
CRITICAL
Cisco Integrated Management Controller Authentication Bypass Vulnerability
Record summary
CVE-2026-20093 has a selected CVSS score of 9.8 (critical).
Description
A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to bypass authentication, alter the passwords of any user on the system, including an Admin user, and gain access to the system as that user.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 1, 2026 · Source: CVE List
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
Cisco Enterprise NFV Infrastructure SoftwareBrowse Cisco / Cisco Enterprise NFV Infrastructure SoftwareDefault status: unknown | CVE List | 4.1.1 | affected |
| 3.9.1 | affected | ||
| 3.5.2 | affected | ||
| 3.12.2 | affected | ||
| 3.6.2 | affected | ||
| 3.9.2 | affected | ||
| 3.11.3 | affected | ||
| 3.11.1 | affected | ||
| 3.5.1 | affected | ||
| 3.3.1 | affected | ||
| 3.10.2 | affected | ||
| 3.12.1b | affected | ||
| Showing 12 of 69 version ranges | |||
Cisco Unified Computing System (Standalone)Browse Cisco / Cisco Unified Computing System (Standalone)Default status: unknown | CVE List | 4.0(2g) | affected |
| 3.1(2i) | affected | ||
| 3.1(1d) | affected | ||
| 4.0(4i) | affected | ||
| 4.1(1c) | affected | ||
| 4.0(2c) | affected | ||
| 4.0(1e) | affected | ||
| 4.0(2h) | affected | ||
| 4.0(4h) | affected | ||
| 4.0(1h) | affected | ||
| 4.0(2l) | affected | ||
| 3.1(3g) | affected | ||
| Showing 12 of 141 version ranges | |||
Cisco Unified Computing System E-Series Software (UCSE)Browse Cisco / Cisco Unified Computing System E-Series Software (UCSE)Default status: unknown | CVE List | 3.2.7 | affected |
| 3.2.6 | affected | ||
| 3.2.4 | affected | ||
| 3.2.10 | affected | ||
| 3.2.2 | affected | ||
| 3.2.3 | affected | ||
| 2.4.0 | affected | ||
| 3.2.1 | affected | ||
| 3.2.11.1 | affected | ||
| 3.2.8 | affected | ||
| 3.1.1 | affected | ||
| 3.0.2 | affected | ||
| Showing 12 of 42 version ranges | |||
References
2cisco-sa-cimc-auth-bypass-AgG2BxTn
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-auth-bypass-AgG2BxTn