{"schemaVersion":3,"id":"CVE-2026-20293","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks and execute unauthorized software.\n\nThis vulnerability is due to the availability of memory write commands in the UEFI Shell while UEFI Secure Boot is enabled on a device. An attacker could exploit this vulnerability by selecting the UEFI Shell boot option at boot time and using available shell commands to modify UEFI memory variables. A successful exploit could allow the attacker to manipulate the preboot environment, overwrite UEFI Secure Boot-related memory values, and execute unauthorized software on the affected device.","dates":{"published":"2026-09-08T16:04:40.874Z","modified":"2026-09-16T03:57:05.926Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.1,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.1,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.1,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00158,"percentile":0.04528,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.026000000000000002,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.00132},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00158,"percentile":0.04528}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00132,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00158,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00158,"percentile":0.04528}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-749","name":"Exposed Dangerous Method or Function","description":"The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/749.html"}],"affected":[{"vendor":"cisco","product":"cisco enterprise nfv infrastructure software","name":"Cisco Enterprise NFV Infrastructure Software","label":"cisco enterprise nfv infrastructure software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.1.1","noFixRecorded":false,"fixedIn":null},{"text":"3.9.1","noFixRecorded":false,"fixedIn":null},{"text":"3.5.2","noFixRecorded":false,"fixedIn":null},{"text":"3.12.2","noFixRecorded":false,"fixedIn":null},{"text":"3.6.2","noFixRecorded":false,"fixedIn":null},{"text":"3.9.2","noFixRecorded":false,"fixedIn":null},{"text":"3.11.3","noFixRecorded":false,"fixedIn":null},{"text":"3.11.1","noFixRecorded":false,"fixedIn":null},{"text":"3.5.1","noFixRecorded":false,"fixedIn":null},{"text":"3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"3.10.2","noFixRecorded":false,"fixedIn":null},{"text":"3.12.1b","noFixRecorded":false,"fixedIn":null},{"text":"3.4.1","noFixRecorded":false,"fixedIn":null},{"text":"3.12.1a","noFixRecorded":false,"fixedIn":null},{"text":"3.6.3","noFixRecorded":false,"fixedIn":null},{"text":"3.8.1","noFixRecorded":false,"fixedIn":null},{"text":"3.11.2","noFixRecorded":false,"fixedIn":null},{"text":"3.12.1","noFixRecorded":false,"fixedIn":null},{"text":"3.12.3","noFixRecorded":false,"fixedIn":null},{"text":"3.10.1","noFixRecorded":false,"fixedIn":null},{"text":"3.6.1","noFixRecorded":false,"fixedIn":null},{"text":"3.10.3","noFixRecorded":false,"fixedIn":null},{"text":"3.7.1","noFixRecorded":false,"fixedIn":null},{"text":"4.1.2","noFixRecorded":false,"fixedIn":null},{"text":"4.2.1","noFixRecorded":false,"fixedIn":null},{"text":"4.2.2","noFixRecorded":false,"fixedIn":null},{"text":"4.4.1","noFixRecorded":false,"fixedIn":null},{"text":"4.4.2","noFixRecorded":false,"fixedIn":null},{"text":"4.5.1","noFixRecorded":false,"fixedIn":null},{"text":"4.4.3","noFixRecorded":false,"fixedIn":null},{"text":"4.6.1","noFixRecorded":false,"fixedIn":null},{"text":"4.7.1","noFixRecorded":false,"fixedIn":null},{"text":"4.6.2-FC2","noFixRecorded":false,"fixedIn":null},{"text":"4.6.2","noFixRecorded":false,"fixedIn":null},{"text":"4.8.1","noFixRecorded":false,"fixedIn":null},{"text":"4.8.2","noFixRecorded":false,"fixedIn":null},{"text":"4.9.1","noFixRecorded":false,"fixedIn":null},{"text":"4.6.3","noFixRecorded":false,"fixedIn":null},{"text":"4.9.2","noFixRecorded":false,"fixedIn":null},{"text":"4.10.1","noFixRecorded":false,"fixedIn":null},{"text":"4.9.3","noFixRecorded":false,"fixedIn":null},{"text":"4.11.1","noFixRecorded":false,"fixedIn":null},{"text":"4.9.4","noFixRecorded":false,"fixedIn":null},{"text":"4.12.1","noFixRecorded":false,"fixedIn":null},{"text":"4.6.4","noFixRecorded":false,"fixedIn":null},{"text":"4.12.2","noFixRecorded":false,"fixedIn":null},{"text":"4.13.1","noFixRecorded":false,"fixedIn":null},{"text":"4.9.5","noFixRecorded":false,"fixedIn":null},{"text":"4.12.3","noFixRecorded":false,"fixedIn":null},{"text":"4.14.1","noFixRecorded":false,"fixedIn":null},{"text":"4.6.3-FC4","noFixRecorded":false,"fixedIn":null},{"text":"4.9.4-FC3","noFixRecorded":false,"fixedIn":null},{"text":"4.12.4","noFixRecorded":false,"fixedIn":null},{"text":"4.15.1","noFixRecorded":false,"fixedIn":null},{"text":"4.9.6","noFixRecorded":false,"fixedIn":null},{"text":"4.15.2","noFixRecorded":false,"fixedIn":null},{"text":"4.12.5","noFixRecorded":false,"fixedIn":null},{"text":"4.15.3","noFixRecorded":false,"fixedIn":null},{"text":"4.15.4","noFixRecorded":false,"fixedIn":null},{"text":"4.12.6","noFixRecorded":false,"fixedIn":null},{"text":"4.15.5","noFixRecorded":false,"fixedIn":null},{"text":"4.12.7","noFixRecorded":false,"fixedIn":null},{"text":"4.12.8","noFixRecorded":false,"fixedIn":null},{"text":"4.15.6","noFixRecorded":false,"fixedIn":null},{"text":"4.9.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.1.1 | 3.9.1 | 3.5.2 | 3.12.2 | 3.6.2 | 3.9.2 | 3.11.3 | 3.11.1 | 3.5.1 | 3.3.1 | 3.10.2 | 3.12.1b | 3.4.1 | 3.12.1a | 3.6.3 | 3.8.1 | 3.11.2 | 3.12.1 | 3.12.3 | 3.10.1 | 3.6.1 | 3.10.3 | 3.7.1 | 4.1.2 | 4.2.1 | 4.2.2 | 4.4.1 | 4.4.2 | 4.5.1 | 4.4.3 | 4.6.1 | 4.7.1 | 4.6.2-FC2 | 4.6.2 | 4.8.1 | 4.8.2 | 4.9.1 | 4.6.3 | 4.9.2 | 4.10.1 | 4.9.3 | 4.11.1 | 4.9.4 | 4.12.1 | 4.6.4 | 4.12.2 | 4.13.1 | 4.9.5 | 4.12.3 | 4.14.1 | 4.6.3-FC4 | 4.9.4-FC3 | 4.12.4 | 4.15.1 | 4.9.6 | 4.15.2 | 4.12.5 | 4.15.3 | 4.15.4 | 4.12.6 | 4.15.5 | 4.12.7 | 4.12.8 | 4.15.6 | 4.9.10","eol":null,"hubHref":"/vendor/cisco/cisco_enterprise_nfv_infrastructure_software"},{"vendor":"cisco","product":"cisco unified computing system e-series software (ucse)","name":"Cisco Unified Computing System E-Series Software (UCSE)","label":"cisco unified computing system e-series software (ucse)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.11.1","noFixRecorded":false,"fixedIn":null},{"text":"4.12.1","noFixRecorded":false,"fixedIn":null},{"text":"4.12.2","noFixRecorded":false,"fixedIn":null},{"text":"4.15.2","noFixRecorded":false,"fixedIn":null},{"text":"4.15.3","noFixRecorded":false,"fixedIn":null},{"text":"4.15.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.11.1 | 4.12.1 | 4.12.2 | 4.15.2 | 4.15.3 | 4.15.4","eol":null,"hubHref":"/vendor/cisco/cisco_unified_computing_system_e-series_software_ucse"},{"vendor":"cisco","product":"cisco unified computing system (managed)","name":"Cisco Unified Computing System (Managed)","label":"cisco unified computing system (managed)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0(1a)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1a)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4h)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4e)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4g)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2e)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4a)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2d)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4f)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4d)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2a)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1d)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4i)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1d)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2a)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1e)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4k)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3a)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3b)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4l)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(4a)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3c)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3d)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1d)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4m)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3e)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1f)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3f)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1i)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1k)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4n)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3h)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1l)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1m)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3i)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2a)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1n)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3j)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2c)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2d)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3b)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3k)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4o)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2e)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3d)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3e)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3g)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3l)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2b)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3h)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3i)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2c)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3m)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2e)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(3a)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3j)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(3c)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4a)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3k)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4b)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4c)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3l)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4d)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3m)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2f)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5a)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4e)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3n)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4f)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3n)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5c)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3o)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5d)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6a)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6b)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5e)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6c)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1b)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3p)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6d)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1d)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1e)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6e)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1f)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6f)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2b)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1h)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3r)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2c)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6g)","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0(1a) | 4.1(1a) | 4.1(1b) | 4.0(4h) | 4.1(1c) | 4.0(4e) | 4.0(4g) | 4.0(2e) | 4.0(4a) | 4.0(2d) | 4.0(1b) | 4.0(4f) | 4.0(4c) | 4.0(1c) | 4.0(4b) | 4.0(2b) | 4.0(4d) | 4.0(2a) | 4.0(1d) | 4.0(4i) | 4.1(1d) | 4.1(2a) | 4.1(1e) | 4.1(2b) | 4.0(4k) | 4.1(3a) | 4.1(3b) | 4.1(2c) | 4.0(4l) | 4.1(4a) | 4.1(3c) | 4.1(3d) | 4.2(1c) | 4.2(1d) | 4.0(4m) | 4.1(3e) | 4.2(1f) | 4.1(3f) | 4.2(1i) | 4.2(1k) | 4.0(4n) | 4.1(3h) | 4.2(1l) | 4.2(1m) | 4.1(3i) | 4.2(2a) | 4.2(1n) | 4.1(3j) | 4.2(2c) | 4.2(2d) | 4.2(3b) | 4.1(3k) | 4.0(4o) | 4.2(2e) | 4.2(3d) | 4.2(3e) | 4.2(3g) | 4.1(3l) | 4.3(2b) | 4.2(3h) | 4.2(3i) | 4.3(2c) | 4.1(3m) | 4.3(2e) | 4.3(3a) | 4.2(3j) | 4.3(3c) | 4.3(4a) | 4.2(3k) | 4.3(4b) | 4.3(4c) | 4.2(3l) | 4.3(4d) | 4.2(3m) | 4.3(2f) | 4.3(5a) | 4.3(4e) | 4.1(3n) | 4.3(4f) | 4.2(3n) | 4.3(5c) | 4.2(3o) | 4.3(5d) | 4.3(6a) | 4.3(6b) | 4.3(5e) | 4.3(6c) | 6.0(1b) | 4.2(3p) | 6.0(1c) | 4.3(6d) | 6.0(1d) | 6.0(1e) | 4.3(6e) | 6.0(1f) | 4.3(6f) | 6.0(2b) | 6.0(1h) | 4.2(3r) | 6.0(2c) | 4.3(6g)","eol":null,"hubHref":"/vendor/cisco/cisco_unified_computing_system_managed"},{"vendor":"cisco","product":"cisco unified computing system (standalone)","name":"Cisco Unified Computing System (Standalone)","label":"cisco unified computing system (standalone)","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0(2g)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(2i)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(1d)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4i)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1e)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2h)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4h)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1h)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2l)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3g)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1.240)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2f)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1g)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2i)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3i)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4d)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1d)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4k)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(2d)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3a)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3j)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2d)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1f)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4j)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2m)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2k)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4f)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4c)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3d)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(2g)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(2c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1d)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(2e)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1a)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1b)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4b)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(2b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4e)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3h)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4l)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1g)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2a)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2n)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(1h)","noFixRecorded":false,"fixedIn":null},{"text":"3.1(3k)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2o)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4m)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2d)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3b)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2p)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2e)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2f)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(4n)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2q)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3c)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(2r)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3d)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2g)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2h)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3g)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3f)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2j)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2k)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3h)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2a)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3i)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2f)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(2g)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3b)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3l)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3d)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(1.230097)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1e)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1b)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1j)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1i)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1f)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1a)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1c)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(1g)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(1.230124)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2l)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3e)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(1.230138)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3g)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.230207)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3h)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3i)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.230270)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3m)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(2m)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240002)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(3.240022)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3j)","noFixRecorded":false,"fixedIn":null},{"text":"4.1(3n)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240009)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(3.240041)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3k)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(3.240043)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.240142)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240037)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240053)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.240152)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3l)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240077)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.242028)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.241063)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.242038)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3m)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240090)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5.240021)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.240107)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.242066)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3n)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5.250001)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3o)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.250016)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.250021)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5.250030)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.250022)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250039)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250040)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5.250033)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250044)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250053)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.250037)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.250045)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.252001)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.252002)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.250127)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3p)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.250131)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250101)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.250174)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250117)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5.250043)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(5.250045)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.250060)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.250130)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(4.241014)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.251030)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.250063)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.250192)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.260003)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.250194)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.260001)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.260017)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(2.260007)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2.260044)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2.260042)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1.260003)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(2.260062)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1.250127)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(1.250096)","noFixRecorded":false,"fixedIn":null},{"text":"4.0(1.260004)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2.260026)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(1.251006)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(0.250011)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(0.250016)","noFixRecorded":false,"fixedIn":null},{"text":"1.0(0.240001)","noFixRecorded":false,"fixedIn":null},{"text":"1.0(0.250003)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(0.250013)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(0.250026)","noFixRecorded":false,"fixedIn":null},{"text":"1.0(1.250002)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(0.250022)","noFixRecorded":false,"fixedIn":null},{"text":"1.1(0.250025)","noFixRecorded":false,"fixedIn":null},{"text":"1.0(1.250032)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2.260034)","noFixRecorded":false,"fixedIn":null},{"text":"6.0(2.260069)","noFixRecorded":false,"fixedIn":null},{"text":"4.3(6.260033)","noFixRecorded":false,"fixedIn":null},{"text":"2.0(2.260101)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3q)","noFixRecorded":false,"fixedIn":null},{"text":"4.2(3r)","noFixRecorded":false,"fixedIn":null},{"text":"1.2(0.260005)","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0(2g) | 3.1(2i) | 3.1(1d) | 4.0(4i) | 4.1(1c) | 4.0(2c) | 4.0(1e) | 4.0(2h) | 4.0(4h) | 4.0(1h) | 4.0(2l) | 3.1(3g) | 4.0(1.240) | 4.0(2f) | 4.0(1g) | 4.0(2i) | 3.1(3i) | 4.0(4d) | 4.1(1d) | 3.1(3c) | 4.0(4k) | 3.1(2d) | 3.1(3a) | 3.1(3j) | 4.0(2d) | 4.1(1f) | 4.0(4j) | 4.0(2m) | 4.0(2k) | 4.0(1c) | 4.0(4f) | 4.0(4c) | 3.1(3d) | 3.1(2g) | 3.1(2c) | 4.0(1d) | 3.1(2e) | 4.0(1a) | 4.0(1b) | 3.1(3b) | 4.0(4b) | 3.1(2b) | 4.0(4e) | 3.1(3h) | 4.0(4l) | 4.1(1g) | 4.1(2a) | 4.0(2n) | 4.1(1h) | 3.1(3k) | 4.1(2b) | 4.0(2o) | 4.0(4m) | 4.1(2d) | 4.1(3b) | 4.0(2p) | 4.1(2e) | 4.1(2f) | 4.0(4n) | 4.0(2q) | 4.1(3c) | 4.0(2r) | 4.1(3d) | 4.1(2g) | 4.1(2h) | 4.1(3g) | 4.1(3f) | 4.1(2j) | 4.1(2k) | 4.1(3h) | 4.2(2a) | 4.1(3i) | 4.2(2f) | 4.2(2g) | 4.2(3b) | 4.1(3l) | 4.2(3d) | 4.3(1.230097) | 4.2(1e) | 4.2(1b) | 4.2(1j) | 4.2(1i) | 4.2(1f) | 4.2(1a) | 4.2(1c) | 4.2(1g) | 4.3(1.230124) | 4.1(2l) | 4.2(3e) | 4.3(1.230138) | 4.2(3g) | 4.3(2.230207) | 4.2(3h) | 4.2(3i) | 4.3(2.230270) | 4.1(3m) | 4.1(2m) | 4.3(2.240002) | 4.3(3.240022) | 4.2(3j) | 4.1(3n) | 4.3(2.240009) | 4.3(3.240041) | 4.2(3k) | 4.3(3.240043) | 4.3(4.240142) | 4.3(2.240037) | 4.3(2.240053) | 4.3(4.240152) | 4.2(3l) | 4.3(2.240077) | 4.3(4.242028) | 4.3(4.241063) | 4.3(4.242038) | 4.2(3m) | 4.3(2.240090) | 4.3(5.240021) | 4.3(2.240107) | 4.3(4.242066) | 4.2(3n) | 4.3(5.250001) | 4.2(3o) | 4.3(2.250016) | 4.3(2.250021) | 4.3(5.250030) | 4.3(2.250022) | 4.3(6.250039) | 4.3(6.250040) | 4.3(5.250033) | 4.3(6.250044) | 4.3(6.250053) | 4.3(2.250037) | 4.3(2.250045) | 4.3(4.252001) | 4.3(4.252002) | 6.0(1.250127) | 4.2(3p) | 6.0(1.250131) | 4.3(6.250101) | 6.0(1.250174) | 4.3(6.250117) | 4.3(5.250043) | 4.3(5.250045) | 4.3(6.250060) | 6.0(1.250130) | 4.3(4.241014) | 6.0(1.251030) | 4.3(2.250063) | 6.0(1.250192) | 4.3(6.260003) | 6.0(1.250194) | 6.0(1.260001) | 4.3(6.260017) | 4.3(2.260007) | 6.0(2.260044) | 6.0(2.260042) | 4.0(1.260003) | 2.0(2.260062) | 2.0(1.250127) | 2.0(1.250096) | 4.0(1.260004) | 6.0(2.260026) | 6.0(1.251006) | 1.2(0.250011) | 1.1(0.250016) | 1.0(0.240001) | 1.0(0.250003) | 1.2(0.250013) | 1.1(0.250026) | 1.0(1.250002) | 1.1(0.250022) | 1.1(0.250025) | 1.0(1.250032) | 6.0(2.260034) | 6.0(2.260069) | 4.3(6.260033) | 2.0(2.260101) | 4.2(3q) | 4.2(3r) | 1.2(0.260005)","eol":null,"hubHref":"/vendor/cisco/cisco_unified_computing_system_standalone"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW","label":"sec.cloudapps.cisco.com/security/…","hostname":"sec.cloudapps.cisco.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-08T16:04:40.874Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-16T03:57:05.926Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:19:43.486Z","stale":false,"partial":false}}