Cisco UCS Central Software Remote Code Execution Vulnerability

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.6.

Jak se o tom psalo 3

1. 5. 11. 2026 · zachyceno 04:30 · NCSC-FI FI nadpis události

   Cisco UCS Central Software Remote Code Execution Vulnerability

   Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.6, CVEs: CVE-2026-76506, Summary: A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by…

2. 4. 11. 2026 20:57 · Cyber Centre Kanada CA

   Cisco security advisory (AV26-1127)

   Serial number: AV26-1127 Date: November 4, 2026 As of November 4, 2026, Cisco is affected by vulnerabilities in the following product: Cisco Unified Computing System (USC) Central Software Prior to 2.1(2c) The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Cisco UCS Central Software Remote Code Execution Vulnerability Cisco Security Advisories

3. 4. 11. 2026 17:00 · Cisco PSIRT US

   Cisco UCS Central Software Remote Code Execution Vulnerability

   A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to…