CVE-2026-20200, CVE-2026-20288: unified computing system 4.3(1.230097), 4.3(1.230124), 4.3(1.230138) (+35 more affected versions); +2 more affected…

CVE-2026-20200

Affected technology

unified computing system · 4.3(1.230097)
cisco

unified computing system · 4.3(1.230124)
cisco

unified computing system · 4.3(1.230138)
cisco

unified computing system · 4.3(2.230207)
cisco

unified computing system · 4.3(2.230270)
cisco

unified computing system · 4.3(2.240002)
cisco

unified computing system · 4.3(3.240022)
cisco

unified computing system · 4.3(3.240043)
cisco

unified computing system · 4.3(4.240142)
cisco

unified computing system · 4.3(4.240152)
cisco

unified computing system · 4.3(4.241014)
cisco

unified computing system · 4.3(4.241063)
cisco

unified computing system · 4.3(4.242028)
cisco

unified computing system · 4.3(4.242038)
cisco

unified computing system · 4.3(4.242066)
cisco

unified computing system · 4.3(4.252001)
cisco

unified computing system · 4.3(4.252002)
cisco

unified computing system · 4.3(5.240021)
cisco

unified computing system · 4.3(5.250001)
cisco

unified computing system · 4.3(5.250030)
cisco

unified computing system · 4.3(5.250033)
cisco

unified computing system · 4.3(5.250043)
cisco

unified computing system · 4.3(5.250045)
cisco

unified computing system · 4.3(6.250039)
cisco

unified computing system · 4.3(6.250040)
cisco

unified computing system · 4.3(6.250044)
cisco

unified computing system · 4.3(6.250053)
cisco

unified computing system · 4.3(6.250060)
cisco

unified computing system · 4.3(6.250101)
cisco

unified computing system · 4.3(6.250117)
cisco

unified computing system · 4.3(6.260003)
cisco

unified computing system · 4.3(6.260017)
cisco

unified computing system · 6.0(1.250127)
cisco

unified computing system · 6.0(1.250130)
cisco

unified computing system · 6.0(1.250131)
cisco

unified computing system · 6.0(1.250174)
cisco

unified computing system · 6.0(1.250192)
cisco

unified computing system · 6.0(1.250194)
cisco

Cisco Unified Computing System (Standalone) · 4.3(1.230097), 4.3(1.230124), 4.3(1.230138), 4.3(2.230207), 4.3(2.230270), 4.3(2.240002), 4.3(3.240022), 4.3(3.240043), 4.3(4.240142), 4.3(4.240152), 4.3(4.242028), 4.3(4.241063), 4.3(4.242038), 4.3(5.240021), 4.3(4.242066), 4.3(5.250001), 4.3(5.250030), 4.3(6.250040), 4.3(5.250033), 4.3(6.250044), 4.3(6.250053), 4.3(4.252001), 4.3(4.252002), 6.0(1.250127), 6.0(1.250131), 4.3(6.250101), 6.0(1.250174), 4.3(6.250117), 4.3(5.250043), 4.3(6.250039), 4.3(5.250045), 4.3(6.250060), 6.0(1.250130), 4.3(4.241014), 6.0(1.250192), 4.3(6.260003), 6.0(1.250194), 4.3(6.260017)
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated, remote attacker with low privileges could execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.

CVE-2026-20288

Affected technology

Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

An authenticated, remote attacker could execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root.