High [CVE-2026-76506] Cisco UCS Central Software Remote Code Execution Vulnerability
This high-severity Cisco advisory covers CVE-2026-76506 affecting Unified Computing System Central Software.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Cisco publishes the next one.
See Cisco's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Summary
A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.
This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device.
A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.
Affected product named by the advisory: Unified Computing System Central Software.
- Scope: This vulnerability affects Cisco UCS Central Software, regardless of device configuration.
Official advisory · high-confidence parse· fetched 9 hours ago·verify at source
Fixed versions
No fixed release is recorded yet. That does not prove no patch exists. Confirm against the vendor advisory.
Official advisory · high-confidence parse· fetched 9 hours ago·verify at source
Mitigation checklist
- There are no workarounds that address this vulnerability.
Official advisory · high-confidence parse· fetched 9 hours ago·verify at source
More Cisco advisories
- CVE-2026-20241Nov 4, 2026Cisco Identity Services Engine Authorization Bypass Vulnerability
- CVE-2026-76419Nov 4, 2026Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
- CVE-2026-76418Oct 28, 2026Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
- CVE-2026-20241Oct 28, 2026Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
- CVE-2026-105482Oct 27, 2026Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
- cisco-sa-emudhra-info-ScS22A1rOct 23, 2026Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate
iPhone and Android apps · New on the App Store
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.