Threats tagged 'ghsa-4q4m-pqh7-mj3f'

CVE-2026-20168 is a vulnerability in the web-based management interface of Cisco IoT Field Network Director that allows an authenticated remote attacker with low privileges to read unauthorized files due to insufficient file access checks. Exploitation requires submitting crafted input to the interface. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact focused on confidentiality loss without integrity or availability impact. No public exploits or known active exploitation have been reported. No affected versions or patch information is provided in the available data.