Critical Security Flaw in Cisco UCS Manager Allows Malicious Command Injection

**Cisco UCS Manager vulnerabilities (CVE-2025-20294, CVE-2025-20295):** Cisco disclosed two medium-severity input-validation flaws in UCS Manager affecting multiple Fabric Interconnect models that can allow command injection or file manipulation with administrative access; fixes are provided (4.2(3p), 4.3(6c), and UCS 6.0 is not vulnerable) and no workarounds exist, with no observed public exploitation to date.