CVE-2026-20093 | A vulnerability in the change password functionality of Cisc… | CVSS 9.8 CRITICAL

Description

A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to bypass authentication, alter the passwords of any user on the system, including an Admin user, and gain access to the system as that user.

Metadata

CVE ID: CVE-2026-20093
State: PUBLISHED
Assigner: cisco
Reserved: 2025-10-08 11:59 UTC
Published: 2026-04-01 16:28 UTC
Last updated: 2026-04-02 03:56 UTC
Primary CWE: CWE-20
Improper Input Validation
Vendor / Product: Cisco / Cisco Enterprise NFV Infrastructure Software
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (3)

Vendor	Product	Platform	Versions
Cisco	Cisco Enterprise NFV Infrastructure Software	—	4.1.1, 3.9.1, 3.5.2, 3.12.2 …
Cisco	Cisco Unified Computing System (Standalone)	—	4.0(2g), 3.1(2i), 3.1(1d), 4.0(4i) …
Cisco	Cisco Unified Computing System E-Series Software (UCSE)	—	3.2.7, 3.2.6, 3.2.4, 3.2.10 …

Weakness (CWE)

CWE	Source	Description
CWE-20	cna	Improper Input Validation

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (1)

cisco-sa-cimc-auth-bypass-AgG2BxTn https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-auth-bypass-AgG2BxTn