PT-2026-6080 · Cisco · Cisco Meeting Management

CVE-2026-20098 · Publicado 2026-02-04 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Meeting Management (affected versions not specified)

Description A flaw exists in the Certificate Management feature that could allow a remote attacker with valid credentials (video operator role or higher) to upload arbitrary files, execute arbitrary commands, and gain root privileges on a system. This is caused by improper input validation within the web-based management interface. An attacker can exploit this by sending a crafted HTTP request. Successful exploitation could lead to overwriting system files processed by the root account, enabling arbitrary command execution with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

BDU:2026-01286

CVE-2026-20098

Produtos afetados

Cisco Meeting Management

Referências · 15

• https://twitter.com/ThreatSynop/status/2019362879296733631 · Publicação no Twitter
• https://twitter.com/dailytechonx/status/2019832216885358627 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-01286 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-file-up-kY47n8kK · Aviso do Fabricante
• https://twitter.com/ThreatSynop/status/2019360855385657391 · Publicação no Twitter
• https://twitter.com/cyberwarzo44531/status/2020785831389106262 · Publicação no Twitter
• https://twitter.com/ThreatSynop/status/2019331948108263701 · Publicação no Twitter
• https://twitter.com/CCBalert/status/2019441248176574506 · Publicação no Twitter
• https://t.me/CVEtracker/43724 · Publicação no Telegram
• https://twitter.com/TheHackerWire/status/2019097839843045695 · Publicação no Twitter
• https://t.me/cveNotify/154971 · Publicação no Telegram
• https://reddit.com/r/pwnhub/comments/1qws2aj/cisco_and_f5_address_critical_security_flaws · Publicação no Reddit
• https://twitter.com/CveFindCom/status/2019111550791897238 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-20098 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-20098 · Nota de Segurança