CVE-2026-20151

A vulnerability in the web interface of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to the improper transmission of sensitive user information. An attacker could exploit this...

CVE-2026-20088

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20094

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation o...

CVE-2026-20087

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20090

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20042

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20085

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20089

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20041

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

EUVD-2026-17952

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation...

EUVD-2026-17953

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. A...

EUVD-2026-17956

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An...

EUVD-2026-17950

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation...

EUVD-2026-17955

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization...

EUVD-2026-17954

A vulnerability in the web interface of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to the improper transmission of sensitive user information. An attacker could exploit this...

EUVD-2026-17935

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

EUVD-2026-17947

A vulnerability in the change password functionality of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to bypass authentication and gain access to the system as Admin. This vulnerability is due to incorrect handling of password change requests. An...

EUVD-2026-17940

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

EUVD-2026-17948

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation o...

EUVD-2026-17933

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attack...