#ucs-servers

Cisco's 9.8 Flaws Hand Attackers Server Keys and Root Access

Cisco dropped fixes for a pair of max-danger 9.8 CVSS holes — one lets attackers rewrite admin passwords remotely, the other cracks open root shells on SSM. No exploits yet, but history screams 'patch now.'

Cisco IMC's Password Change Flaw Hands Attackers the Keys to Your Servers

What if your Cisco server's out-of-band manager was wide open to any hacker with a crafted request? CVE-2026-20093 turns password changes into admin backdoors—no login required.