CVE-2026-20167

High

Description

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due to improper error handling. An attacker could exploit this vulnerability by submitting crafted input to the web-based management interface. A successful exploit could allow the attacker to request unauthorized files from a remote router, causing the router to reload and resulting in a DoS condition.

SeverityHigh
CVSS7.7
Exploit probability—
ProductCisco Iot Field Network Director
PublishedMay 6, 2026
First seenMay 6, 2026

How to fix

Update
  • cisco iot_field_network_director5.0.0-117 or later

Affected products

ProductAffected versionsFixed in
cisco iot_field_network_directorv < 5.0.0-1175.0.0-117

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.