Cisco UCS Central Software Remote Code Execution Vulnerability

Authenticated remote code execution vulnerability in Cisco UCS Central Software prior to 2.1(2c).

A vulnerability in Cisco UCS Central Software allows an authenticated remote attacker to achieve remote code execution or information disclosure. It stems from insufficient validation of user-supplied input in HTTP requests. An attacker must have valid credentials to exploit it. Successful exploitation could enable arbitrary command execution, file writes, and sensitive data access. The Canadian Centre for Cyber Security issued advisory AV26-1127 urging users to apply updates to affected versions.