Cisco IMC Web UI Exploits Enable Remote Root Access via Argument Injection

Recent findings expose two critical argument‑injection weaknesses in the web‑based management console of Cisco’s Integrated Management Controller (IMC). When an attacker is authenticated to the IMC, the flaws allow them to inject crafted parameters that the system blindly forwards to the underlying operating system. This gives the attacker the ability to execute arbitrary commands and elevate their privileges to root.

Key Details

• Vulnerable component: IMC web UI argument handling
• Impact: Remote code execution + privilege escalation to root
• Severity: High (Security Impact Rating: High)
• CVEs: CVE‑2026‑20200, CVE‑2026‑20288
• No workarounds available; only updates mitigate the risk

"These flaws allow an authenticated attacker to execute arbitrary commands on the underlying OS and elevate privileges to root."

Cisco has released firmware updates that patch the affected code paths. System administrators should apply the latest IMC patches immediately and verify that no legacy or custom configurations expose the vulnerable parameters.