Public preview. Built from real public data on November 9, 2026, 5:41 AM UTC.
Securidigm Watch Transportation cyber intel
Home / Items
VulnerabilitySeverity 7.6 high

Cisco Unified Computing System Central Remote Code Execution Vulnerability

CVE-2026-76506 · CVE Program · November 4, 2026

Summary

A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.

From CVE record (written by the reporting organization), quoted as published. Check the source before acting.

Affected products

VendorProductAffected versionsFixed
CiscoCisco Unified Computing System Central Software2.0(1e), 2.0(1a), 2.0(1h), 2.0(1g), 2.0(1c), 2.0(1k), 2.0(1l), 2.0(1f), 2.0(1j), 2.0(1b), 2.0(1i), 2.0(1d), 2.0(1m), 2.0(1n), 2.0(1o), 2.0(1p), 2.0(1q), 2.0(1r), 2.0(1s), 2.0(1t)—

Why it's on these mode pages

  • Maritime: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Pipeline: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Freight rail: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Passenger rail and transit: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Highway and motor carrier: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)
  • Postal and parcel: Vendor table: Cisco (network and remote-access gear used in every mode, all modes) (matched by rule)

Change history

  1. November 9, 2026: First collected by Watch

Securidigm Scout can match advisories like this one to the equipment on your own network, offline. securidigm.com