CVE-2026-20093

CVE-2026-20093 is a vulnerability where an unauthenticated remote attacker can completely bypass the login process and gain full administrative access to the system. This allows the attacker to change the password of any user. Cisco IMC manages servers at a hardware level which makes this is especially dangerous as the attacker could manipulate hardware settings, power cycle servers, disrupt critical infrastructure, and use the compromised device to launch attacks on other systems on the network.

EPSS 0.03% · 7.7th percentile