Cisco Security Updates – 02 April 2026

The addressed vulnerabilities could allow the attacker to bypass authentication and security restrictions, execute arbitrary commands or code, gain elevated privileges, obtain sensitive information, conduct cross-site scripting and serverside request forgery attacks, manipulate files, and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. Cisco Integrated Management Controller Authentication Bypass Vulnerability (CVE-2026-20093):

• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability (CVE-2026-20151):

• CVSS: 7.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: Required
• Consequences: Gain Privileges

Sample of the affected products:

• Cisco Integrated Management Controller.
• Cisco Smart Software Manager On-Prem.
• Cisco Nexus Dashboard Insights.
• Cisco Evolved Programmable Network Manager.