CVE-2026-20098

A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system. This vulnerability is due to improper input validation in certain sections of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to upload arbitrary files to the affected system. The malicious files could overwrite system files that are processed by the root system account and allow arbitrary command execution with root privileges. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of video operator.

• CWE-434

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-file-up-kY47n8kKVendor Advisory

Published

Feb 4, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20092A vulnerability in the read-only maintenance shell of Cisco …6
• CVE-2026-20093A vulnerability in the change password functionality of Cisc…9.8
• CVE-2026-20094A vulnerability in the web-based management interface of Cis…8.8
• CVE-2026-20095A vulnerability in the web-based management interface of Cis…6.5
• CVE-2026-20096A vulnerability in the web-based management interface of Cis…6.5
• CVE-2026-20097A vulnerability in the web-based management interface of Cis…6.5
• CVE-2026-20099A vulnerability in the web-based management interface of Cis…6.7
• CVE-2026-2010A vulnerability has been found in Sanluan PublicCMS up to 4.…4.2
• CVE-2026-20100A vulnerability in the LUA interperter of the Remote Access …7.7
• CVE-2026-20101A vulnerability in the SAML 2.0 single sign-on (SSO) feature…8.6
• CVE-2026-20102A vulnerability in the SAML 2.0 single sign-on (SSO) feature…6.1
• CVE-2026-20103A vulnerability in the Remote Access SSL VPN functionality o…8.6