PT-2026-6586 · Exagate · Sysguard 6001

Published 2026-02-05 · Updated 2026-02-05 · CVE-2020-37144

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Exagate SYSGuard 6001

Description The software contains a cross-site request forgery condition that enables attackers to create unauthorized administrator accounts via a specially designed HTML form. Attackers can deceive users into submitting a malicious form to the /kulyon.php endpoint, which adds a new user with administrative privileges without the user’s knowledge.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2020-37144

Affected Products

Sysguard 6001

References · 6

• 🔥 https://exploit-db.com/exploits/48234 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37144 · Security Note
• https://t.me/CVEtracker/43834 · Telegram Post
• https://vulncheck.com/advisories/exagate-sysguard-cross-site-request-forgery-add-admin · Note
• https://web.archive.org/web/20191020064936/https://exagate.com/sysguard-6001 · Note
• https://exagate.com · Note