Critical Cisco IMC Vulnerability (CVE-2026-20200) Allows Root Access with Public PoC

Cisco has patched a critical vulnerability (CVE-2026-20200) in its Integrated Management Controller (IMC) that could allow an authenticated, low-privilege remote attacker to execute arbitrary commands as the root user via crafted inputs to the web-based management interface. A public proof-of-concept exploit is available.