CVE-2026-76506
Received Received - Intake

Remote Code Execution in Cisco UCS Central Software

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-76506
EUVD
EUVD-2026-116971

Affected Vendors & Products

Showing 28 associated CPEs
Vendor Product Version / Range
Cisco Cisco Unified Computing System Central Software 2.0(1e)
Cisco Cisco Unified Computing System Central Software 2.0(1a)
Cisco Cisco Unified Computing System Central Software 2.0(1h)
Cisco Cisco Unified Computing System Central Software 2.0(1g)
Cisco Cisco Unified Computing System Central Software 2.0(1c)
Cisco Cisco Unified Computing System Central Software 2.0(1k)
Cisco Cisco Unified Computing System Central Software 2.0(1l)
Cisco Cisco Unified Computing System Central Software 2.0(1f)
Cisco Cisco Unified Computing System Central Software 2.0(1j)
Cisco Cisco Unified Computing System Central Software 2.0(1b)
Cisco Cisco Unified Computing System Central Software 2.0(1i)
Cisco Cisco Unified Computing System Central Software 2.0(1d)
Cisco Cisco Unified Computing System Central Software 2.0(1m)
Cisco Cisco Unified Computing System Central Software 2.0(1n)
Cisco Cisco Unified Computing System Central Software 2.0(1o)
Cisco Cisco Unified Computing System Central Software 2.0(1p)
Cisco Cisco Unified Computing System Central Software 2.0(1q)
Cisco Cisco Unified Computing System Central Software 2.0(1r)
Cisco Cisco Unified Computing System Central Software 2.0(1s)
Cisco Cisco Unified Computing System Central Software 2.0(1t)
Cisco Cisco Unified Computing System Central Software 2.0(1u)
Cisco Cisco Unified Computing System Central Software 2.0(1v)
Cisco Cisco Unified Computing System Central Software 2.0(1w)
Cisco Cisco Unified Computing System Central Software 2.1(1a)
Cisco Cisco Unified Computing System Central Software 2.1(1b)
Cisco Cisco Unified Computing System Central Software 2.1(1c)
Cisco Cisco Unified Computing System Central Software 2.1(2a)
Cisco Cisco Unified Computing System Central Software 2.1(2b)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a remote code execution vulnerability in Cisco UCS Central Software. An authenticated remote attacker can send a crafted HTTP request to execute arbitrary commands, write files to the filesystem, or obtain sensitive information. The issue is due to insufficient validation of user-supplied input in HTTP requests.

Detection Guidance

Detecting this vulnerability requires checking if your Cisco UCS Central Software version is affected. Use commands like 'show version' or 'show running-config' on the device to verify the software version. Compare it against the fixed release (2.1(2c) or later).

Monitor network traffic for unusual HTTP requests targeting the web-based management interface. Use tools like Wireshark to inspect HTTP traffic for crafted requests.

Impact Analysis

If exploited, an attacker could gain control over the affected device, execute malicious commands, access sensitive data, or modify files. This requires valid user credentials but could lead to significant system compromise and data breaches.

Compliance Impact

This vulnerability could lead to unauthorized access, data breaches, or exposure of sensitive information due to remote code execution and information disclosure risks. Such incidents may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security), potentially resulting in legal penalties, reputational damage, and mandatory breach notifications.

Mitigation Strategies

Immediately upgrade to a fixed release of Cisco UCS Central Software (2.1(2c) or later). Since no workarounds exist, patching is the only mitigation. Ensure backups are taken before upgrading.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76506. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...