Cisco Issues Urgent Patch for Critical IMC Auth Bypass: A CVSS 9.8 Wake-Up Call

A critical vulnerability (CVE-2026-20093, CVSS 9.8) in Cisco Integrated Management Controller (IMC) allows a remote, unauthenticated attacker to send crafted HTTP requests to bypass authentication, change any user’s password (including Admin), and take control of affected systems; the advisory lists numerous impacted Cisco platforms and fixed releases and urges immediate updates or access restrictions while patches are applied.