P5Verified

CVE-2026-20293: A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and…

CVE-2026-20293. EPSS 0.00158 (percentile 0.04336), scored 03-Oct-2026.

Affected technology

A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

An attacker could exploit this vulnerability by selecting the UEFI Shell boot option at boot time and using available shell commands to modify UEFI memory variables.

Published 14-Oct-2026 05:08 UTC

CCR priority: 0.0 /100 (P5)
EPSS: 0.00158 · percentile 0.04447 · 2026-10-13
KEV: no

Provenance

Cisco Security Advisories RSS · Source record · observed 2026-10-14 05:07:33.433659+00:00 UTC
FIRST EPSS daily exploit-probability · Source record · observed 2026-10-14 05:24:14.258005+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-20293.html