Critical Cisco IMC Vulnerability (CVE-2026-20200) Allowing Root Access Disclosed with Public Proof-of-Concept

Cisco has addressed a critical vulnerability, CVE-2026-20200, in its Integrated Management Controller (IMC) that could allow authenticated, low-privileged remote attackers to execute arbitrary commands as the root user via crafted inputs to the web-based management interface. A public proof-of-concept exploit for this flaw is available.