cbcvebase.
CVE-2026-20169
published 2026-05-06

CVE-2026-20169: A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to…

PriorityP341medium6.4CVSS 3.1
AVNACLPRLUINSCCLILAN
EPSS
0.21%
11.3th percentile
A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router. This vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in user EXEC mode on a remote router.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
ciscocisco_iot_field_network_director——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.