Skip to content
ThreatCluster

Cisco UCS Central Software RCE Vulnerability Disclosed

First seen 4 Nov 2026, 20:19 UTC • • •Early signal · one source
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 20:20 UTC
  • •Cisco UCS Central Software has a critical RCE vulnerability due to insufficient input validation.
  • •Attackers need valid user credentials to exploit this vulnerability.
  • •Cisco has released patches, but no workarounds exist for this issue.

A vulnerability in Cisco UCS Central Software's web-based management interface could enable authenticated remote attackers to execute arbitrary code or disclose sensitive information. This flaw arises from inadequate validation of user input in HTTP requests. Attackers with valid credentials can exploit this vulnerability by sending crafted HTTP requests to affected endpoints. Cisco has released software updates to mitigate this issue, but no workarounds are available. The vulnerability affects all configurations of Cisco UCS Central Software. Cisco strongly advises users to upgrade to the fixed software versions listed in their advisory.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 22h ago How this analysis works

Timeline

2026-11-04
Cisco discloses RCE vulnerability
Cisco announced a critical remote code execution vulnerability in UCS Central Software affecting all configurations.
Sec.Cloudapps.Cisco
2026-11-04
Patches released
Cisco released software updates to address the RCE vulnerability in UCS Central Software.
Sec.Cloudapps.Cisco

More articles in this cluster (1)

Extracted Entities (3)

1 / 3

Common questions

What versions are affected?
All configurations of Cisco UCS Central Software are affected by this vulnerability.
What should I do to protect my systems?
Upgrade to the fixed software versions provided in the Cisco advisory as soon as possible.
Are there any workarounds available?
No, Cisco has stated that there are no workarounds for this vulnerability.