Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2026-20099

Cisco UCS Manager and FXOS Software Command Injection Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to perform command injection attacks on an affected system and elevate privileges to root.  This vulnerability is due to insufficient input validation of command arguments supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system of the affected device with root-level privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Firepower Extensible Operating System (FXOS)

Default version status: unknown

  • 2.3.1.99affected
  • 2.3.1.56affected
  • 2.3.1.110affected
  • 2.3.1.58affected
  • 2.6.1.174affected
  • 2.6.1.157affected
  • 2.3.1.91affected
  • 2.3.1.73affected
  • 2.3.1.66affected
  • 2.6.1.166affected
  • 2.3.1.111affected
  • 2.3.1.166affected
  • 2.3.1.144affected
  • 2.6.1.131affected
  • 2.3.1.130affected
  • 2.3.1.88affected
  • 2.6.1.169affected
  • 2.3.1.75affected
  • 2.3.1.93affected
  • 2.3.1.145affected
  • 2.3.1.155affected
  • 2.6.1.187affected
  • 2.3.1.173affected
  • 2.3.1.179affected
  • 2.6.1.192affected
  • 2.3.1.180affected
  • 2.6.1.204affected
  • 2.6.1.214affected
  • 2.3.1.190affected
  • 2.6.1.224affected
  • 2.6.1.229affected
  • 2.3.1.215affected
  • 2.10.1.159affected
  • 2.3.1.216affected
  • 2.6.1.230affected
  • 2.10.1.166affected
  • 2.6.1.238affected
  • 2.6.1.239affected
  • 2.11.1.154affected
  • 2.10.1.179affected
  • 2.3.1.219affected
  • 2.6.1.254affected
  • 2.12.0.31affected
  • 2.12.0.432affected
  • 2.10.1.207affected
  • 2.3.1.230affected
  • 2.6.1.259affected
  • 2.11.1.182affected
  • 2.12.0.450affected
  • 2.10.1.234affected
  • 2.13.0.198affected
  • 2.12.0.467affected
  • 2.13.0.212affected
  • 2.6.1.264affected
  • 2.10.1.245affected
  • 2.11.1.200affected
  • 2.12.0.498affected
  • 2.10.1.271affected
  • 2.12.1.29affected
  • 2.13.0.243affected
  • 2.11.1.205affected
  • 2.6.1.265affected
  • 2.12.1.48affected
  • 2.14.1.131affected
  • 2.13.0.276affected
  • 2.11.1.228affected
  • 2.12.1.72affected
  • 2.10.1.312affected
  • 2.6.1.272affected
  • 2.14.1.143affected
  • 2.14.1.163affected
  • 2.14.1.167affected
  • 2.12.1.84affected
  • 2.16.0.128affected
  • 2.10.1.328affected
  • 2.10.1.341affected
  • 2.11.1.236affected
  • 2.12.1.95affected
  • 2.13.0.357affected
  • 2.16.0.136affected
  • 2.14.1.186affected
  • 2.17.0.518affected
  • 2.14.1.187affected

Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Default version status: unknown

  • 9.12.2affected
  • 9.12.1affected
  • 9.12.3affected
  • 9.12.4affected
  • 9.12.3.2affected
  • 9.12.3.12affected
  • 9.12.2.5affected
  • 9.12.1.2affected
  • 9.12.2.1affected
  • 9.12.3.7affected
  • 9.12.2.9affected
  • 9.12.3.9affected
  • 9.12.1.3affected
  • 9.12.4.2affected
  • 9.12.4.4affected
  • 9.12.4.7affected
  • 9.12.4.8affected
  • 9.12.4.10affected
  • 9.12.4.13affected
  • 9.12.4.18affected
  • 9.12.4.24affected
  • 9.16.1affected
  • 9.12.4.26affected
  • 9.16.1.28affected
  • 9.12.4.29affected
  • 9.16.2affected
  • 9.12.4.30affected
  • 9.16.2.3affected
  • 9.12.4.35affected
  • 9.16.2.7affected
  • 9.12.4.37affected
  • 9.17.1affected
  • 9.16.2.11affected
  • 9.16.2.13affected
  • 9.12.4.39affected
  • 9.12.4.38affected
  • 9.16.2.14affected
  • 9.17.1.7affected
  • 9.12.4.40affected
  • 9.16.3.3affected
  • 9.16.3affected
  • 9.17.1.9affected
  • 9.16.3.14affected
  • 9.12.4.41affected
  • 9.17.1.10affected
  • 9.18.1affected
  • 9.12.4.47affected
  • 9.16.3.15affected
  • 9.18.1.3affected
  • 9.17.1.11affected
  • 9.12.4.48affected
  • 9.18.2affected
  • 9.16.3.19affected
  • 9.17.1.13affected
  • 9.12.4.50affected
  • 9.17.1.15affected
  • 9.12.4.52affected
  • 9.16.3.23affected
  • 9.18.2.5affected
  • 9.16.4affected
  • 9.12.4.54affected
  • 9.17.1.20affected
  • 9.18.2.7affected
  • 9.19.1affected
  • 9.16.4.9affected
  • 9.12.4.55affected
  • 9.18.2.8affected
  • 9.16.4.14affected
  • 9.18.3affected
  • 9.19.1.5affected
  • 9.12.4.56affected
  • 9.17.1.30affected
  • 9.19.1.9affected
  • 9.18.3.39affected
  • 9.16.4.19affected
  • 9.12.4.58affected
  • 9.19.1.12affected
  • 9.18.3.46affected
  • 9.16.4.27affected
  • 9.19.1.18affected
  • 9.18.3.53affected
  • 9.18.3.55affected
  • 9.16.4.38affected
  • 9.17.1.33affected
  • 9.12.4.62affected
  • 9.16.4.39affected
  • 9.18.3.56affected
  • 9.16.4.42affected
  • 9.19.1.22affected
  • 9.18.4affected
  • 9.18.4.5affected
  • 9.19.1.24affected
  • 9.16.4.48affected
  • 9.18.4.8affected
  • 9.20.2affected
  • 9.19.1.27affected
  • 9.12.4.65affected
  • 9.16.4.55affected
  • 9.18.4.22affected
  • 9.20.2.10affected
  • 9.16.4.57affected
  • 9.19.1.28affected
  • 9.17.1.39affected
  • 9.12.4.67affected
  • 9.18.4.24affected
  • 9.20.2.21affected
  • 9.16.4.61affected
  • 9.19.1.31affected
  • 9.18.4.29affected
  • 9.20.2.22affected
  • 9.16.4.62affected
  • 9.18.4.34affected
  • 9.20.3affected
  • 9.16.4.67affected
  • 9.18.4.40affected
  • 9.16.4.71affected
  • 9.20.3.4affected
  • 9.18.4.47affected
  • 9.20.3.7affected
  • 9.17.1.45affected
  • 9.19.1.37affected
  • 9.16.4.76affected
  • 9.18.4.50affected
  • 9.20.3.10affected
  • 9.18.4.52affected
  • 9.20.3.13affected
  • 9.18.4.53affected
  • 9.16.4.82affected
  • 9.20.3.16affected
  • 9.19.1.42affected
  • 9.18.4.57affected
  • 9.16.4.84affected
  • 9.20.3.20affected
  • 9.20.4affected
  • 9.20.4.7affected

Cisco Cisco Unified Computing System (Managed)

Default version status: unknown

  • 4.0(4h)affected
  • 4.1(1a)affected
  • 4.0(1c)affected
  • 4.0(4a)affected
  • 4.0(1a)affected
  • 4.0(1d)affected
  • 4.1(1c)affected
  • 4.0(2a)affected
  • 4.0(4g)affected
  • 4.0(2e)affected
  • 4.0(4c)affected
  • 4.0(4f)affected
  • 4.0(1b)affected
  • 4.0(2b)affected
  • 4.0(2d)affected
  • 4.1(1b)affected
  • 4.0(4d)affected
  • 4.0(4e)affected
  • 4.0(4b)affected
  • 4.1(2a)affected
  • 4.1(1d)affected
  • 4.0(4i)affected
  • 4.1(1e)affected
  • 4.1(2b)affected
  • 4.0(4k)affected
  • 4.1(3a)affected
  • 4.1(3b)affected
  • 4.1(2c)affected
  • 4.0(4l)affected
  • 4.1(4a)affected
  • 4.1(3c)affected
  • 4.1(3d)affected
  • 4.2(1c)affected
  • 4.2(1d)affected
  • 4.0(4m)affected
  • 4.1(3e)affected
  • 4.2(1f)affected
  • 4.1(3f)affected
  • 4.2(1i)affected
  • 4.1(3h)affected
  • 4.2(1k)affected
  • 4.2(1l)affected
  • 4.0(4n)affected
  • 4.2(1m)affected
  • 4.1(3i)affected
  • 4.2(2a)affected
  • 4.2(1n)affected
  • 4.1(3j)affected
  • 4.2(2c)affected
  • 4.2(2d)affected
  • 4.2(3b)affected
  • 4.1(3k)affected
  • 4.0(4o)affected
  • 4.2(2e)affected
  • 4.2(3d)affected
  • 4.2(3e)affected
  • 4.2(3g)affected
  • 4.1(3l)affected
  • 4.3(2b)affected
  • 4.2(3h)affected
  • 4.2(3i)affected
  • 4.3(2c)affected
  • 4.1(3m)affected
  • 4.3(2e)affected
  • 4.3(3a)affected
  • 4.2(3j)affected
  • 4.3(3c)affected
  • 4.3(4a)affected
  • 4.2(3k)affected
  • 4.3(4b)affected
  • 4.3(4c)affected
  • 4.2(3l)affected
  • 4.3(4d)affected
  • 4.3(2f)affected
  • 4.2(3m)affected
  • 4.3(5a)affected
  • 4.3(4e)affected
  • 4.1(3n)affected
  • 4.3(4f)affected
  • 4.2(3n)affected
  • 4.3(5c)affected
  • 4.2(3o)affected
  • 4.3(5d)affected
  • 4.3(6a)affected
  • 4.3(6b)affected
  • 4.3(5e)affected
  • 4.2(3p)affected

References