CVE-2026-20160
Critical · 9.8CVSS
9.8
EPSS
0.9%
Published
Apr 1, 2026
CISA due date
—
The record
A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An attacker could exploit this vulnerability by sending a crafted request to the API of the exposed service. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-668
- CVE-2026-92940 vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to… CWE-668
- CVE-2026-85053 Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82… CWE-668
- CVE-2026-82652 SiYuan before v3.8.1 fails to filter invisible-tier content from SQL embed blocks… CWE-668
- CVE-2026-82650 SiYuan 3.8.0 contains a path traversal / sensitive file exposure vulnerability in the… CWE-668
- CVE-2026-79068 Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed… CWE-668
- CVE-2026-79031 Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a… CWE-668
- CVE-2026-72924 GitHub CLI (gh) is GitHub's official command line tool. CWE-668