Cisco Patches Critical IMC Vulnerability (CVE-2026-20200) Allowing Root Access, Public PoC Available

Cisco has released a fix for a critical vulnerability (CVE-2026-20200, CVSS 9.8) in its Integrated Management Controller (IMC), which could allow an authenticated, low-privilege remote attacker to execute arbitrary commands as the root user via the web-based management interface. A public proof-of-concept exploit is available.