← Back

CVE-2026-20160

nvd nist
Published: Apr 1, 2026Modified: Jul 1, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: psirt@cisco.com (Secondary)

Description

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An attacker could exploit this vulnerability by sending a crafted request to the API of the exposed service. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.

Affected (1)

Cisco
1 product
Smart Software Manager On Prem
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Smart Software Manager On Prem
From 9-202502 to 9-202601

Related CWEs

CWE-668
Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (1)

Source: psirt@cisco.com
Vendor Advisory

Timeline

No history available yet.