Cisco Patches Critical IMC Vulnerability

Cisco has patched a critical vulnerability in its Integrated Management Controller (IMC) used by some of its newest UCS rack servers. The weakness, tracked as CVE-2026-20200, allows an attacker to execute arbitrary commands with root privileges on the controller.

The vulnerability is caused by inadequate validation of input supplied to the IMC web interface and can be exploited by a remote attacker who has authenticated with a low-privileged account. The attacker can submit crafted input to the affected interface and gain access to the underlying operating system as root.

Cisco released fixes on August 5 as part of a wider security update covering IMC, IOS XE, Catalyst SD-WAN, and several other products. The company was not aware of malicious exploitation when its advisory was published, but the availability of a public proof-of-concept exploit gives defenders a smaller window to identify vulnerable systems and install updates.