CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

HPE-iMC-7.3-RMI-Java-Deserialization

HPE iMC 7.3 Vulnerabilidad de RCE por deserialización en el registro RMI de Java ID de CVE CVE-2017-5792 Exploit Página web del proveedor: www.hpe.com Versión: iMC PLAT v7.3 E0504 Standard Probado en: Windows Server 2008 R2 Enterprise 64-bit tenga en cuenta que este PoC ejecutará calc.exe $ java...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Fixed the use of a mutex in the IRQs-disabled section. The current imc-pmu code triggers a warning when CONFIGDEBUGATOMICSLEEP is enabled and CONFIGPROVELOCKING is also enabled, while a threadimc event is running...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: A null pointer check was added in updateeventsingroup. kasprintf returns a pointer to dynamically allocated memory; this pointer can be NULL in case of failure...

Cisco Integrated Management Controller Argument Injection (CVE-2026-20288) (cisco-sa-cimc-arg-inject-upSHdMfU)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...

CVE-2026-20288 Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to root. This vulnerability is due to improper...

CVE-2026-20200

CVE-2026-20200 concerns Cisco IMC. The weakness is in the web-based management interface, where an authenticated, low-privileged attacker can trigger improper validation of user input to execute arbitrary commands on the underlying OS with root privileges. The issue implies remote exploitation vi...

CVE-2026-20198

The CVE-2026-20198 involves Cisco Integrated Management Controller (IMC) web-based management interface. Affected component: IMC web UI; vulnerability: cross-site scripting (XSS) due to insufficient input validation. Exploitation requires user interaction (phishing-style crafted link) by an authe...

CVE-2026-5935

CVE-2026-5935 affects IBM Total Storage Service Console (TSSC) / TS4500 IMC versions 9.2–9.6. The IBM advisory documents an OS Command Injection vulnerability (CWE-78) due to improper validation of user input, allowing an unauthenticated user to execute arbitrary commands with normal user privile...

PT-2026-34585

IBM Total Storage Service Console TSSC / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input...

CVE-2026-20087

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20090

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20085

A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by...

CVE-2026-20097

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. A...

CVE-2026-20089

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20088

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20094

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation o...

EUVD-2026-17940

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

EUVD-2026-17948

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation o...

EUVD-2026-17943

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...