CVE-2026-76506 with a CVSS score of 7.6 is a remote code execution vulnerability in the web-based management interface of UCS Central Software version 2.0. The flaw stems from insufficient validation of user-supplied input in an HTTP request, allowing an authenticated, remote attacker to send a crafted request to an affected endpoint. Exploitation requires valid user credentials on the affected device and does not require additional user interaction. A successful attack can let the attacker execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. Because the component is a management interface, compromise can expose administrative controls, configuration data, credentials, or other sensitive operational details, potentially enabling unauthorized changes or disruption of managed infrastructure. The impact is therefore a combination of confidentiality loss, integrity risk, and availability impact, with the greatest business concern being unauthorized access to a central management system and the sensitive data or administrative capabilities it controls.
We recommend you to update Cisco UCS Central Software to version 2.1(2c).[/subscribe_to_unlock_form]
CVE-2026-76506 with a CVSS score of 7.6 is a remote code execution vulnerability in the web-based management interface of UCS Central Software version 2.0. The flaw stems from insufficient validation of user-supplied input in an HTTP request, allowing an authenticated, remote attacker to send a crafted request to an affected endpoint. Exploitation requires valid user credentials on the affected device and does not require additional user interaction. A successful attack can let the attacker execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. Because the component is a management interface, compromise can expose administrative controls, configuration data, credentials, or other sensitive operational details, potentially enabling unauthorized changes or disruption of managed infrastructure. The impact is therefore a combination of confidentiality loss, integrity risk, and availability impact, with the greatest business concern being unauthorized access to a central management system and the sensitive data or administrative capabilities it controls.
We recommend you to update Cisco UCS Central Software to version 2.1(2c).[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]