This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Cisco IMC and SSM fix 2 critical vulnerabilities
Cisco fixes 2 critical vulnerabilities found in Integrated Management Controller and Smart Software Manager On-Prem. Version 9-202601 is available for SSM On-Prem [1]; for IMC, the fixed versions are listed separately for each affected product [2].
Allows an unauthenticated remote attacker, due to improper handling of password change requests in Cisco Integrated Management Controller (IMC), to bypass authentication, change the passwords of arbitrary users including the Admin account and gain access to the system with Admin user privileges [2].
The vulnerability is present in product:
- Integrated Management Controller;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2026-20093 at cve.org, NVD
- CWE-20: Improper Input Validation at cwe.mitre.org
The vulnerability was publicly disclosed 1. 4. 2026.
Allows an unauthenticated remote attacker, due to inadvertent exposure of an internal service in Cisco Smart Software Manager On-Prem (SSM On-Prem), to execute arbitrary commands with root privileges on the underlying operating system via a specially crafted API request [1].
The vulnerability is present in product:
- Cisco Smart Software Manager On-Prem; <9-202601
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2026-20160 at cve.org, NVD
- CWE-668: Exposure of Resource to Wrong Sphere at cwe.mitre.org
The vulnerability was publicly disclosed 1. 4. 2026.
Links
By CESNET, z.s.p.o. Michaela Jarošová on 7. 4. 2026.