Vulnerability Details CVE-2026-20160
A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host.
This vulnerability is due to the unintentional exposure of an internal service. An attacker could exploit this vulnerability by sending a crafted request to the API of the exposed service. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 55.9%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-20160
-
cpe:2.3:a:cisco:smart_software_manager_on-prem:9-202502
-
cpe:2.3:a:cisco:smart_software_manager_on-prem:9-202504
-
cpe:2.3:a:cisco:smart_software_manager_on-prem:9-202507
-
cpe:2.3:a:cisco:smart_software_manager_on-prem:9-202510