Cross-Site Request Forgery Vulnerability in SnapGear Management Console by Secure Computing
CVE-2020-36908

5.1MEDIUM

Key Information:

Vendor: Secure Computing
Status: Snapgear Management Console Sg560
Vendor: CVE Published:; 6 January 2026

🔔 Create Secure Computing Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2020-36908?

The SnapGear Management Console SG560 version 3.1.5 is vulnerable to a cross-site request forgery (CSRF) flaw that enables attackers to execute unauthorized administrative actions without user consent. By crafting a malicious web page, an attacker can trick a legitimate user into submitting a form that creates a new super user account equipped with full administrative rights upon visiting the page. This could lead to severe security implications if exploited, allowing unauthorized access and control over the system.

Affected Version(s)

SnapGear Management Console SG560 3.1.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2020-36908 - Proof of Concept