cyber.hendryadrian.com
Vulnerability & Exploit · thehackernews.com

Cisco Patches Critical IMC Authentication Bypass and SSM On-Prem RCE

· Original article ↗

Summary

Cisco patched two unauthenticated, remote vulnerabilities rated CVSS 9.8: an IMC authentication bypass and an SSM On-Prem flaw allowing root-level command execution. No exploitation in the wild was reported.

Key points

  • CVE-2026-20093 affects Cisco IMC; a crafted HTTP request could let an unauthenticated remote attacker change user passwords and gain access.
  • CVE-2026-20160 affects Smart Software Manager On-Prem; a crafted API request could enable unauthenticated remote command execution with root privileges.
  • Both vulnerabilities have CVSS scores of 9.8.
  • Cisco released fixes for affected ENCS, Catalyst 8300, UCS C-Series and UCS E-Series products; SSM On-Prem is fixed in version 9-202601.
  • Cisco reported no known exploitation in the wild and said no workaround is available; customers are advised to install the applicable updates.
  • Cisco credited researcher “jyh” with reporting CVE-2026-20093; the SSM On-Prem flaw was found internally during a TAC support case.

Article Details

Vulnerability Types
  • Authentication bypass
  • Remote command execution
Severity
Critical; both vulnerabilities have CVSS scores of 9.8
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-20093Cisco · Cisco Enterprise NFV Infrastructure Software; Cisco · Cisco Unified Computing System (Standalone); +1 morereleased urgent patches for a critical Integrated Management Controller (IMC) authentication bypass (CVE-2026-20093) and a Smart Software Manager On-Prem (SSM On-Prem) remote command execution flaw (CVE-2026-20160).CVE-2026-20160Cisco · Cisco Smart Software Manager On-Prem(CVE-2026-20093) and a Smart Software Manager On-Prem (SSM On-Prem) remote command execution flaw (CVE-2026-20160).

People

jyhCredited with discovering and reporting the IMC authentication-bypass vulnerability, CVE-2026-20093.

Vendors

CiscoCisco released urgent patches for a critical Integrated Management Controller (IMC) authentication bypass (CVE-2026-20093) and a Smart Software Manager On-Prem (SSM On-Prem) remote command execution flaw

Products

5000 Series Enterprise Network Compute Systems (ENCS)5000 Series Enterprise Network Compute Systems (ENCS) – Fixed in 4.15.5Catalyst 8300 Series Edge uCPECatalyst 8300 Series Edge uCPE – Fixed in 4.18.3Integrated Management Controller (IMC)Cisco released urgent patches for a critical Integrated Management Controller (IMC) authentication bypass (CVE-2026-20093) and a Smart Software Manager On-Prem (SSM On-Prem) remote command execution flawSmart Software Manager On-Prem (SSM On-Prem)Integrated Management Controller (IMC) authentication bypass (CVE-2026-20093) and a Smart Software Manager On-Prem (SSM On-Prem) remote command execution flaw (CVE-2026-20160).UCS C-Series M5 and M6 Rack ServersUCS C-Series M5 and M6 Rack Servers in standalone mode – Fixed in 4.3(2.260007), 4.3(6.260017), and 6.0(1.250174)UCS E-Series Servers M3UCS E-Series Servers M3 – Fixed in 3.2.17UCS E-Series Servers M6UCS E-Series Servers M6 – Fixed in 4.15.3

Related Articles