https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-20293.htmlhttps://patchthecve.com/cve/CVE-2026-20293.htmlMon, 26 Oct 2026 20:22:25 +0000HIGH 7.1: A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical accehttps://patchthecve.com/cve/CVE-2026-20096.htmlhttps://patchthecve.com/cve/CVE-2026-20096.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 6.5: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validhttps://patchthecve.com/cve/CVE-2026-20095.htmlhttps://patchthecve.com/cve/CVE-2026-20095.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.5: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validhttps://patchthecve.com/cve/CVE-2026-20090.htmlhttps://patchthecve.com/cve/CVE-2026-20090.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 4.8: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exphttps://patchthecve.com/cve/CVE-2026-20089.htmlhttps://patchthecve.com/cve/CVE-2026-20089.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 4.8: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exphttps://patchthecve.com/cve/CVE-2026-20088.htmlhttps://patchthecve.com/cve/CVE-2026-20088.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 4.8: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exphttps://patchthecve.com/cve/CVE-2026-20087.htmlhttps://patchthecve.com/cve/CVE-2026-20087.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 4.8: A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exphttps://patchthecve.com/cve/CVE-2026-20085.htmlhttps://patchthecve.com/cve/CVE-2026-20085.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.1: A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by