CVE-2020-26063mediumCWE-269

CVE-2020-26063: medium-severity vulnerability in Cisco Unified Computing System (Managed)

Cisco Integrated Management Controller Software Authorization Bypass Vulnerability

Published

Follow this CVE+ Monitor Cisco Unified Computing System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.6%
A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take actions on a vulnerable system without authorization. The vulnerability is due to improper authorization checks on API endpoints. An attacker could exploit this vulnerability by sending malicious requests to an API endpoint. An exploit could allow the attacker to download files from or modify limited configuration options on the affected system.There are no workarounds that address this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/RL:X/RC:X/E:X
Affected products
Cisco · Cisco Unified Computing System (Managed)
Related CVEs — Cisco Unified Computing System (Managed)

In the same product, most dangerous first.

CVE-2020-3119HIGHCisco NX-OS Software Cisco Discovery Protocol Remote Code Execution VulnerabilityEPSS 4.8%CVE-2026-76455CRITICALCisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control VulnerabilitiesEPSS 4.0%CVE-2025-20292MEDIUMCisco NXOS Software Command Injection VulnerabilityEPSS 3.1%CVE-2019-1962HIGHCisco NX-OS Software Cisco Fabric Services over IP Denial of Service VulnerabilityEPSS 2.0%CVE-2020-3172HIGHCisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service VulnerabilityEPSS 1.9%CVE-2019-1963HIGHCisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service VulnerabilityEPSS 1.6%