Remote Code Execution Vulnerability in Cisco UCS Central Software
CVE-2026-76506

7.6HIGH

Key Information:

Vendor

Cisco
Status
Cisco Unified Computing System Central Software
Vendor
CVE Published:
4 November 2026

Badges

👾 Exploit Exists

What is CVE-2026-76506?

A vulnerability in the web-based management interface of Cisco UCS Central Software allows authenticated remote attackers to exploit insufficient validation of user-supplied input. By sending a specially crafted HTTP request, attackers can achieve remote code execution, enabling them to execute arbitrary commands, write files to the system, and potentially access sensitive information. Successful exploitation necessitates valid user credentials on the affected device. To mitigate this risk, users are advised to apply the software updates released by Cisco, as there are no current workarounds to prevent exploitation.

Affected Version(s)

Cisco Unified Computing System Central Software 2.0(1e)

Cisco Unified Computing System Central Software 2.0(1a)

Cisco Unified Computing System Central Software 2.0(1h)

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.