A valid management login can become a route to code execution. If you run UCS Central, Cisco’s advisory and release notes give you a specific upgrade target.
Published November 4, 2026. Cisco advisory cisco-sa-cucs-rce-LzHSFRDQ, version 1.0, was published at 16:00 UTC. The Cisco CNA record for CVE-2026-76506 followed at 16:27 UTC.
What changed November 5, 2026. We verified the original advisory’s fixed release table and Cisco’s upgrade notes. Cisco lists 2.1(2c) as the first fixed 2.1 release and directs 2.0 and earlier users to migrate to a fixed release. Last verified November 5.
Applicability. The issue affects the Cisco UCS Central web management interface. An attacker needs valid user credentials and network access to send a crafted HTTP request. Cisco describes command execution, arbitrary file writes and sensitive information access.
Exact affected versions in Cisco’s CNA record: 2.0(1a), 2.0(1b), 2.0(1c), 2.0(1d), 2.0(1e), 2.0(1f), 2.0(1g), 2.0(1h), 2.0(1i), 2.0(1j), 2.0(1k), 2.0(1l), 2.0(1m), 2.0(1n), 2.0(1o), 2.0(1p), 2.0(1q), 2.0(1r), 2.0(1s), 2.0(1t), 2.0(1u), 2.0(1v), 2.0(1w), 2.1(1a), 2.1(1b), 2.1(1c), 2.1(2a), 2.1(2b). Unlisted versions have unknown status in that record.
Vendor severity and exploitation. High, CVSS 3.1 score 7.6. Cisco PSIRT reports no known public announcements or malicious use. CISA KEV did not list CVE-2026-76506 when checked on November 5.
Supported upgrade. Cisco lists direct CLI/ISO upgrades to 2.1(2c) from 2.1(1a), 2.1(1b), 2.1(1c), 2.1(2a) and 2.1(2b). Its notes document backup restoration to 2.1(2c) from 2.0(1s) and later. Validate migration and UCS Manager compatibility before scheduling. Cisco lists no workaround.
Suggested MSP priority is prompt review. Inventory exact builds and who can reach the management interface. Restrict access to trusted admin paths while scheduling a supported upgrade. Afterward, confirm the running release, registered domains and management workflows. If you find suspicious activity, preserve evidence and scope the incident.
Official sources. Cisco advisory · Cisco release notes and upgrade paths · Cisco CNA record · CISA KEV