Status: Active. Cisco disclosed a remote code execution vulnerability on November 4, 2026. Last updated November 6, 2026.
Summary
Cisco UCS Central Software can be remotely compromised by an authenticated attacker who sends a crafted HTTP request. The flaw was disclosed on November 4, 2026, and attackers could execute commands or steal data if the software is not patched.
Vulnerability details
- CVE ID: CVE-2026-76506
- Severity: HIGH (CVSS 3.1 base score 7.6)
- Type: Remote Code Execution (authenticated)
- Affected software: Cisco UCS Central Software (all versions prior to the fixed release)
- Exploited in the wild: No public reports
- Fixed in: Version 2.1(2c) and later; for 2.0 and earlier, migrate to a fixed release
Who is affected
Any organization that runs Cisco UCS Central Software on its management servers is at risk. Small-business IT environments that rely on Cisco UCS for server provisioning or management should verify their software version immediately.
What ASI recommends
Follow these vendor-approved actions to protect your Cisco UCS infrastructure:
1. Identify your UCS Central version
Log in to the UCS Central web UI or use the CLI to display the current software version. This step is required to determine whether you need to upgrade.
2. Upgrade to the fixed release
If you are on a 2.1.x release, upgrade to at least version 2.1(2c) or newer. For any 2.0.x release, migrate to a fixed release as described in the Cisco advisory.
3. Restart the UCS Central service
After installing the update, restart the UCS Central service to ensure the patched code is loaded.
How ASI can help
ASI can verify your UCS Central version, apply the update, and test your environment. Contact us at info@asiweb.org or visit our free consultation page.
References
- Cisco Security Advisory: Cisco UCS Central Software Remote Code Execution Vulnerability (CVE-2026-76506)
- NVD entry for CVE-2026-76506
Last updated: November 6, 2026. Questions? Contact ASI.