Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
Vendor advisorySeverity 9.8 critical

Cisco Integrated Management Controller Authentication Bypass Vulnerability

cisco-sa-cimc-auth-bypass-AgG2BxTn · Cisco · April 1, 2026

Summary

A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. This vulnerability is due to incorrect handling of password change requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to bypass authentication, alter the passwords of any user on the system, including an Admin user, and gain access to the system as that user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

From Cisco (vendor's own words, quoted), quoted as published. Check the source before acting.

What to do

Cisco has released software updates that address this vulnerability.

Vendor fix or mitigation, quoted from the advisory.

Each CVE in this advisory

CVESeverityKnown exploitedExploit likelihoodWeakness
CVE-2026-200939.8 criticalNo1.0%—

Severity from the advisory (CVSS), known exploitation from CISA's catalog, exploit likelihood from EPSS (next 30 days).

Affected products

VendorProductAffected versionsFixed
CiscoCisco Unified Computing System (Standalone)3.1, 4.0, 4.1, 4.2, 4.3, 6.0—
CiscoCisco Unified Computing System E-Series Software (UCSE)2.1, 2.4, 3.2, 3.1, 3.0, 2.3, 2.2, 2.0, 4.11, 4.12, 4.15—
CiscoCisco Enterprise NFV Infrastructure Software3.5, 3.6, 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, 4.1, 3.3, 3.4, 4.2, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11—
CiscoCisco UCS C-Series Rack-Mount Standalone Server Software——
CiscoCisco UCS E-Series Servers——
CiscoCisco 5000 Series Enterprise Network Compute System——

Why it's on these mode pages

  • Maritime: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)

Change history

  1. April 1, 2026: Initial public release.
  2. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com