Skip to content

CVE-2026-20160

CVE

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
April 2, 2026
Last Seen
April 2, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Cisco IMC Vulnerability Allows Full Admin Access via Authentication Bypass72.9

Cisco Systems has disclosed a critical authentication bypass vulnerability, CVE-2026-20093, affecting its Integrated Management Controller (IMC) with a CVSS score of 9.8. This flaw allows unauthenticated remote attackers to send crafted HTTP requests to vulnerable Cisco UCS C-Series and E-Series ser...

Critical Cisco Smart Software Manager Vulnerability Enables Remote Command Execution69.9

Cisco has issued a high-priority security advisory for a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) platform, tracked as CVE-2026-20160. This flaw, which has a CVSS score of 9.8, allows unauthenticated remote attackers to execute arbitrary commands with root privilege...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitSupply Chain AttackTrivy Supply Chain AttackCiscoCisco SystemsCVE-2026-20093CVE-2026-20131T1059 - Command and Scripting InterpreterT1078 - Valid AccountsT1190 - Exploit Public-Facing ApplicationT1195 - Supply Chain CompromiseCisco Smart Software Manager On-Prem