Insufficient Input Validation in Cisco IoT Field Network Director

CVE-2026-20169

What is CVE-2026-20169?

A vulnerability within the web-based management interface of Cisco IoT Field Network Director allows an authenticated remote attacker with limited privileges to access sensitive files and execute commands on a remote router. This issue stems from inadequate input validation of user-supplied data, making it possible for an attacker to exploit the vulnerability by entering specially crafted input via the management interface. If successfully exploited, the attacker could manipulate files—creating, reading, or deleting—and execute commands in user EXEC mode on the affected router.

References