cbcvebase.
CVE-2026-20167
published 2026-05-06

CVE-2026-20167: A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to…

PriorityP348high7.7CVSS 3.1
AVNACLPRLUINSCCNINAH
EPSS
0.27%
19.1th percentile
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due to improper error handling. An attacker could exploit this vulnerability by submitting crafted input to the web-based management interface. A successful exploit could allow the attacker to request unauthorized files from a remote router, causing the router to reload and resulting in a DoS condition.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.