Back to the CVE list
CVE-2026-20087

Cross-site scripting in Cisco Enterprise Nfv Infrastructure Software

CVSS score

4.8

EPSS probability

%0.2

Risk score

0.0

Published

6 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-20087 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-20087 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1ciscoenterprise nfv infrastructure software View
2ciscoenterprise nfv infrastructure software View
3ciscoenterprise nfv infrastructure software View
4ciscoenterprise nfv infrastructure software View
5ciscoenterprise nfv infrastructure software View
6ciscoenterprise nfv infrastructure software View
7ciscoenterprise nfv infrastructure software View
8ciscoenterprise nfv infrastructure software View
9ciscoenterprise nfv infrastructure software View
10ciscoenterprise nfv infrastructure software View
11ciscoenterprise nfv infrastructure software View
12ciscoenterprise nfv infrastructure software View
13ciscoenterprise nfv infrastructure software View
14ciscoenterprise nfv infrastructure software View
15ciscoenterprise nfv infrastructure software View
16ciscoenterprise nfv infrastructure software View
17ciscoenterprise nfv infrastructure software View
18ciscoenterprise nfv infrastructure software View
19ciscoenterprise nfv infrastructure software View
20ciscoenterprise nfv infrastructure software View
21ciscoenterprise nfv infrastructure software View
22ciscoenterprise nfv infrastructure software View
23ciscoenterprise nfv infrastructure software View
24ciscoenterprise nfv infrastructure software View
25ciscoenterprise nfv infrastructure software View
26ciscoenterprise nfv infrastructure software View
27ciscoenterprise nfv infrastructure software View
28ciscoenterprise nfv infrastructure software View
29ciscoenterprise nfv infrastructure software View
30ciscoenterprise nfv infrastructure software View
31ciscoenterprise nfv infrastructure software View
32ciscoenterprise nfv infrastructure software View
33ciscoenterprise nfv infrastructure software View
34ciscoenterprise nfv infrastructure software View
35ciscoenterprise nfv infrastructure software View
36ciscoenterprise nfv infrastructure software View
37ciscoenterprise nfv infrastructure software View
38ciscoenterprise nfv infrastructure software View
39ciscoenterprise nfv infrastructure software View
40ciscoenterprise nfv infrastructure software View
41ciscoenterprise nfv infrastructure software View
42ciscoenterprise nfv infrastructure software View
43ciscoenterprise nfv infrastructure software View
44ciscoenterprise nfv infrastructure software View
45ciscoenterprise nfv infrastructure software View
46ciscoenterprise nfv infrastructure software View
47ciscoenterprise nfv infrastructure software View
48ciscoenterprise nfv infrastructure software View
49ciscoenterprise nfv infrastructure software View
50ciscoenterprise nfv infrastructure software View
51ciscoenterprise nfv infrastructure software View
52ciscoenterprise nfv infrastructure software View
53ciscoenterprise nfv infrastructure software View
54ciscoenterprise nfv infrastructure software View
55ciscoenterprise nfv infrastructure software View
56ciscoenterprise nfv infrastructure software View
57ciscoenterprise nfv infrastructure software View
58ciscoenterprise nfv infrastructure software View
59ciscoenterprise nfv infrastructure software View
60ciscoenterprise nfv infrastructure software View
61ciscoenterprise nfv infrastructure software View
62ciscoenterprise nfv infrastructure software View
63ciscoenterprise nfv infrastructure software View
64ciscoenterprise nfv infrastructure software View
65ciscoenterprise nfv infrastructure software View
66ciscoenterprise nfv infrastructure software View
67ciscoenterprise nfv infrastructure software View
68ciscoenterprise nfv infrastructure software View
69ciscoenterprise nfv infrastructure software View
70ciscoenterprise nfv infrastructure software View
71ciscounified computing system View
72ciscounified computing system View
73ciscounified computing system View
74ciscounified computing system View
75ciscounified computing system View
76ciscounified computing system View
77ciscounified computing system View
78ciscounified computing system View
79ciscounified computing system View
80ciscounified computing system View
81ciscounified computing system View
82ciscounified computing system View
83ciscounified computing system View
84ciscounified computing system View
85ciscounified computing system View
86ciscounified computing system View
87ciscounified computing system View
88ciscounified computing system View
89ciscounified computing system View
90ciscounified computing system View
91ciscounified computing system View
92ciscounified computing system View
93ciscounified computing system View
94ciscounified computing system View
95ciscounified computing system View
96ciscounified computing system View
97ciscounified computing system View
98ciscounified computing system View
99ciscounified computing system View
100ciscounified computing system View
101ciscounified computing system View
102ciscounified computing system View
103ciscounified computing system View
104ciscounified computing system View
105ciscounified computing system View
106ciscounified computing system View
107ciscounified computing system View
108ciscounified computing system View
109ciscounified computing system View
110ciscounified computing system View
111ciscounified computing system View
112ciscounified computing system View
113ciscounified computing system View
114ciscounified computing system View
115ciscounified computing system View
116ciscounified computing system View
117ciscounified computing system View
118ciscounified computing system View
119ciscounified computing system View
120ciscounified computing system View
121ciscounified computing system View
122ciscounified computing system View
123ciscounified computing system View
124ciscounified computing system View
125ciscounified computing system View
126ciscounified computing system View
127ciscounified computing system View
128ciscounified computing system View
129ciscounified computing system View
130ciscounified computing system View
131ciscounified computing system View
132ciscounified computing system View
133ciscounified computing system View
134ciscounified computing system View
135ciscounified computing system View
136ciscounified computing system View
137ciscounified computing system View
138ciscounified computing system View
139ciscounified computing system View
140ciscounified computing system View
141ciscounified computing system View
142ciscounified computing system View
143ciscounified computing system View
144ciscounified computing system View
145ciscounified computing system View
146ciscounified computing system View
147ciscounified computing system View
148ciscounified computing system View
149ciscounified computing system View
150ciscounified computing system View
151ciscounified computing system View
152ciscounified computing system View
153ciscounified computing system View
154ciscounified computing system View
155ciscounified computing system View
156ciscounified computing system View
157ciscounified computing system View
158ciscounified computing system View
159ciscounified computing system View
160ciscounified computing system View
161ciscounified computing system View
162ciscounified computing system View
163ciscounified computing system View
164ciscounified computing system View
165ciscounified computing system View
166ciscounified computing system View
167ciscounified computing system View
168ciscounified computing system View
169ciscounified computing system View
170ciscounified computing system View
171ciscounified computing system View
172ciscounified computing system View
173ciscounified computing system View
174ciscounified computing system View
175ciscounified computing system View
176ciscounified computing system View
177ciscounified computing system View
178ciscounified computing system View
179ciscounified computing system View
180ciscounified computing system View
181ciscounified computing system View
182ciscounified computing system View
183ciscounified computing system View
184ciscounified computing system View
185ciscounified computing system View
186ciscounified computing system View
187ciscounified computing system View
188ciscounified computing system View
189ciscounified computing system View
190ciscounified computing system View
191ciscounified computing system View
192ciscounified computing system View
193ciscounified computing system View
194ciscounified computing system View
195ciscounified computing system View
196ciscounified computing system View
197ciscounified computing system View
198ciscounified computing system View
199ciscounified computing system View
200ciscounified computing system View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
4.8CVSS V31MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-20087 is associated with the following CWEs:

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-20087 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsHigh
UserGerekiyor

Official Sources and Advisories

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-xss-A2tkgVABvendor-advisory

CVSS Vector Radar Chart

4.8 / 10
Attack VectorNetworkComplexityLowPrivilegesHighUser Interact.RequiredConfidentialityLowIntegrityLowAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh privileges
User Interaction—
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)Low
Availability (Erişilebilirlik)None

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

C
cisco logo
cisco

Weakness Type (CWE & CAPEC)

CWE-79

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20087"