Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2026-20293Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Description

A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks and execute unauthorized software. This vulnerability is due to the availability of memory write commands in the UEFI Shell while UEFI Secure Boot is enabled on a device. An attacker could exploit this vulnerability by selecting the UEFI Shell boot option at boot time and using available shell commands to modify UEFI memory variables. A successful exploit could allow the attacker to manipulate the preboot environment, overwrite UEFI Secure Boot-related memory values, and execute unauthorized software on the affected device.

Timeline

  1. ID reserved

    By cisco

  2. · 11 months later

    Published

  3. · 8 days later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2026-20293, by who scored it
Scored byCVSSScoreVector
ciscoCNA (assigner)3.1High7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVDNVD · Analyzed3.1High7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS (exploitation in 30 days)
0.18% · top 92% of all CVEs (12 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.

Affected products

  • Cisco · Cisco Enterprise NFV Infrastructure Software

    • affected 4.1.1
    • affected 3.9.1
    • affected 3.5.2
    • affected 3.12.2
    • affected 3.6.2
    • affected 3.9.2
    • affected 3.11.3
    • affected 3.11.1
    • affected 3.5.1
    • affected 3.3.1
    • affected 3.10.2
    • affected 3.12.1b
    • affected 3.4.1
    • affected 3.12.1a
    • affected 3.6.3
    • affected 3.8.1
    • affected 3.11.2
    • affected 3.12.1
    • affected 3.12.3
    • affected 3.10.1
    • affected 3.6.1
    • affected 3.10.3
    • affected 3.7.1
    • affected 4.1.2
    • affected 4.2.1
    • affected 4.2.2
    • affected 4.4.1
    • affected 4.4.2
    • affected 4.5.1
    • affected 4.4.3
    • affected 4.6.1
    • affected 4.7.1
    • affected 4.6.2-FC2
    • affected 4.6.2
    • affected 4.8.1
    • affected 4.8.2
    • affected 4.9.1
    • affected 4.6.3
    • affected 4.9.2
    • affected 4.10.1
    • and 25 more

  • Cisco · Cisco Unified Computing System (Managed)

    • affected 4.0(1a)
    • affected 4.1(1a)
    • affected 4.1(1b)
    • affected 4.0(4h)
    • affected 4.1(1c)
    • affected 4.0(4e)
    • affected 4.0(4g)
    • affected 4.0(2e)
    • affected 4.0(4a)
    • affected 4.0(2d)
    • affected 4.0(1b)
    • affected 4.0(4f)
    • affected 4.0(4c)
    • affected 4.0(1c)
    • affected 4.0(4b)
    • affected 4.0(2b)
    • affected 4.0(4d)
    • affected 4.0(2a)
    • affected 4.0(1d)
    • affected 4.0(4i)
    • affected 4.1(1d)
    • affected 4.1(2a)
    • affected 4.1(1e)
    • affected 4.1(2b)
    • affected 4.0(4k)
    • affected 4.1(3a)
    • affected 4.1(3b)
    • affected 4.1(2c)
    • affected 4.0(4l)
    • affected 4.1(4a)
    • affected 4.1(3c)
    • affected 4.1(3d)
    • affected 4.2(1c)
    • affected 4.2(1d)
    • affected 4.0(4m)
    • affected 4.1(3e)
    • affected 4.2(1f)
    • affected 4.1(3f)
    • affected 4.2(1i)
    • affected 4.2(1k)
    • and 61 more

  • Cisco · Cisco Unified Computing System (Standalone)

    • affected 4.0(2g)
    • affected 3.1(2i)
    • affected 3.1(1d)
    • affected 4.0(4i)
    • affected 4.1(1c)
    • affected 4.0(2c)
    • affected 4.0(1e)
    • affected 4.0(2h)
    • affected 4.0(4h)
    • affected 4.0(1h)
    • affected 4.0(2l)
    • affected 3.1(3g)
    • affected 4.0(1.240)
    • affected 4.0(2f)
    • affected 4.0(1g)
    • affected 4.0(2i)
    • affected 3.1(3i)
    • affected 4.0(4d)
    • affected 4.1(1d)
    • affected 3.1(3c)
    • affected 4.0(4k)
    • affected 3.1(2d)
    • affected 3.1(3a)
    • affected 3.1(3j)
    • affected 4.0(2d)
    • affected 4.1(1f)
    • affected 4.0(4j)
    • affected 4.0(2m)
    • affected 4.0(2k)
    • affected 4.0(1c)
    • affected 4.0(4f)
    • affected 4.0(4c)
    • affected 3.1(3d)
    • affected 3.1(2g)
    • affected 3.1(2c)
    • affected 4.0(1d)
    • affected 3.1(2e)
    • affected 4.0(1a)
    • affected 4.0(1b)
    • affected 3.1(3b)
    • and 140 more

  • Cisco · Cisco Unified Computing System E-Series Software (UCSE)

    • affected 4.11.1
    • affected 4.12.1
    • affected 4.12.2
    • affected 4.15.2
    • affected 4.15.3
    • affected 4.15.4

What to do

Exploitation: The Cisco PSIRT is aware that proof-of-concept exploit code is available for the vulnerability described in this advisory. The Cisco PSIRT is not aware of any malicious use of the vulnerability that is described in this advisory.

References

References1

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-20293 badge
[![CVE-2026-20293](https://cveledger.app/badge/CVE-2026-20293.svg)](https://cveledger.app/cve/CVE-2026-20293)

Record last updated .