CVE-2026-20160

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 0.93%
EPSS Percentile: 60.76%
CISA KEV: Not listed

Description

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An attacker could exploit this vulnerability by sending a crafted request to the API of the exposed service. A successful exploit could allow the attacker to execute commands on the underlying operating system with root-level privileges.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 02-Apr-2026 00:28
Last Modified: 27-Oct-2026 05:10
EPSS Date: 2026-11-06
CWE: CWE-668

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

Cisco · Cisco Smart Software Manager On-Prem Source: CNA · [email protected]
Default status: unknown

9-202502 — affected
9-202504 — affected
9-202507 — affected
9-202510 — affected

Affected Products / Versions

cisco / smart_software_manager_on-prem Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 9-202502 · before (exclusive) 9-202601
cpe:2.3:a:cisco:smart_software_manager_on-prem:*:*:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 07-Nov-2026 08:40
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (3)

(CVE-2026-20093) and a Smart Software Manager On-Prem (SSM On-Prem) remote command execution flaw (CVE-2026-20160). Cisco Patches Critical IMC Authentication Bypass and SSM On-Prem RCE
because there are no mitigations; fixes also cover a Smart Software Manager OnâPrem RCE (CVE-2026-20160), the FMC RCE previously exploited by Interlock (CVE-2026-20131), and follow a reported breach tied Cisco Patches Critical IMC Authentication Bypass Enabling Admin Access
One of the critical bugs, tracked as CVE-2026-20160, impacts Cisco Smart Software Manager On-Prem (SSM On-Prem) and could allow attackers to abuse an erroneously exposed internal service to execute arbitrary commands. Cisco Patches Critical and High-Severity Flaws Affecting Enterprise Products

CVE (2)

People (1)

Threat Actors (1)

MITRE ATT&CK (1)

Vendors (1)

Products (15)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.