
Hardware
Cisco's server controller scored a 9.8 bug that hands out root — exploit code is already public
CVE-2026-20200 lets a low-privilege, already-logged-in attacker take full root control of Cisco UCS C-Series servers through the web management interface — and the discoverer's own proof-of-concept tool is sitting on GitHub right now.
Ravi Malhotra · 1h ago · 6 min