CVE-2026-20094 - Vulnerability Analysis

Overview

Cisco IMC contains a command injection caused by improper validation of user-supplied input in the web-based management interface, letting authenticated remote attackers with read-only privileges execute arbitrary commands as root, exploit requires authenticated access with read-only privileges.

Severity & Score

Impact

Authenticated attackers with read-only privileges can execute arbitrary commands as root, leading to full system compromise.

Mitigation

Update to the latest available version that addresses this vulnerability.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-cmd-inj-3hKN3bVt

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 2, 2026

🟠 CVE-2026-20094 - High (8.8) A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20094/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner