Cyber Resilience

CVE-2026-20168

Cisco Iot Field Network Director ≤ 5.0.0-117

Published
06 May 2026
Modified
30 June 2026
Patch / advisory
View advisory
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0027 19th percentile
Risk Priority 49 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2026-20168 is a medium-severity an unspecified weakness vulnerability in Cisco Iot Field Network Director. Its CVSS base score is 6.5 (Medium).

Operationally, ranked at the 19th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to retrieve files that they do not have permission to access. This vulnerability is due to insufficient file…

more

access checks. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to read files that they are not authorized to access.

CWE(s)
CWE-388

Related Threats

CVEs Like This One

CVE-2026-20167Same product: Cisco Iot Field Network Director
CVE-2026-20169Same product: Cisco Iot Field Network Director
CVE-2023-20227Same vendor: Cisco
CVE-2026-20006Same vendor: Cisco
CVE-2023-20173Same vendor: Cisco
CVE-2025-20278Same vendor: Cisco
CVE-2023-20064Same vendor: Cisco
CVE-2023-37464Same vendor: Cisco
CVE-2023-20216Same vendor: Cisco
CVE-2025-20346Same vendor: Cisco

Affected Assets

cisco
iot field network director
≤ 5.0.0-117

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References