Cisco warns of remote code execution flaw in UCS Central Software before 2.1(2c)
VULNERABILITYCanadian Centre for Cyber Securityredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Advisory AV26-1127 (Canadian Centre for Cyber Security, 4 November 2026) covers a remote code execution vulnerability in Cisco UCS Central Software prior to 2.1(2c). No CVE identifiers, CVSS score or exploitation status are given in the advisory text. Defenders should identify UCS Central instances, confirm their versions, upgrade to 2.1(2c) or later, and review the Cisco security advisory linked from the Cyber Centre notice.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether your environment runs Cisco UCS Central Software and confirm the installed version.
- Upgrade any version prior to 2.1(2c) to 2.1(2c) or later as soon as the update is available.
- Review the Cisco security advisory linked from the Canadian Centre for Cyber Security notice AV26-1127.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security