enterprise nfv infrastructure software vulnerabilities and fixes

Recent CVEs affecting enterprise nfv infrastructure software, with upgrade or downgrade steps. 8 tracked.

Also searched as: enterprisenfvinfrastructuresoftware.

enterprise nfv infrastructure software has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-09-08. Highest priority: CVE-2026-20095 (score 38/100).

• CVE-2026-20096 MEDIUM 6.5 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20088 MEDIUM 4.8 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20090 MEDIUM 4.8 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20095 MEDIUM 6.5 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20085 MEDIUM 6.1 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote atta
• CVE-2026-20089 MEDIUM 4.8 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20087 MEDIUM 4.8 DOWNGRADE MITIGATE A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack
• CVE-2026-20293 HIGH 7.1 DOWNGRADE MITIGATE A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers

FAQ

How do I fix enterprise nfv infrastructure software vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise nfv infrastructure software being exploited right now?

None of the tracked enterprise nfv infrastructure software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise nfv infrastructure software CVE should I patch first?

CVE-2026-20095 currently ranks highest (38/100): A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attack.

RSS feed for enterprise nfv infrastructure software · ← Back to latest CVEs