PT-2026-6080 · Cisco · Cisco Meeting Management

Published 2026-02-04 · Updated 2026-03-10 · CVE-2026-20098

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Meeting Management (affected versions not specified)

Description A flaw exists in the Certificate Management feature that could allow a remote attacker with valid credentials (video operator role or higher) to upload arbitrary files, execute arbitrary commands, and gain root privileges on a system. This is caused by improper input validation within the web-based management interface. An attacker can exploit this by sending a crafted HTTP request. Successful exploitation could lead to overwriting system files processed by the root account, enabling arbitrary command execution with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2026-01286

CVE-2026-20098

Affected Products

Cisco Meeting Management

References · 15

• https://bdu.fstec.ru/vul/2026-01286 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-file-up-kY47n8kK · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-20098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20098 · Security Note
• https://twitter.com/ThreatSynop/status/2019362879296733631 · Twitter Post
• https://twitter.com/dailytechonx/status/2019832216885358627 · Twitter Post
• https://twitter.com/ThreatSynop/status/2019360855385657391 · Twitter Post
• https://twitter.com/cyberwarzo44531/status/2020785831389106262 · Twitter Post
• https://twitter.com/ThreatSynop/status/2019331948108263701 · Twitter Post
• https://twitter.com/CCBalert/status/2019441248176574506 · Twitter Post
• https://t.me/CVEtracker/43724 · Telegram Post
• https://twitter.com/TheHackerWire/status/2019097839843045695 · Twitter Post
• https://t.me/cveNotify/154971 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1qws2aj/cisco_and_f5_address_critical_security_flaws · Reddit Post
• https://twitter.com/CveFindCom/status/2019111550791897238 · Twitter Post