What is the CVSS score of CVE-2026-20098?

CVE-2026-20098 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Which versions of Meeting Management are affected by CVE-2026-20098?

Cisco Meeting Management systems are vulnerable to remote code execution and privilege escalation attacks by authenticated users, potentially allowing attackers to gain full control of affected…

How to fix or mitigate CVE-2026-20098?

Within 24 hours: Identify all Cisco Meeting Management deployments and document current user access lists; disable Certificate Management feature if operationally feasible. Within 7 days: Implement network segmentation to restrict access to CMM instances, enforce multi-factor authentication for all administrative accounts, and enable enhanced logging on affected systems. Within 30 days: Contact Cisco for patch availability timeline, prepare change management procedures for immediate deployment when patch releases, and conduct threat hunt for suspicious file uploads or privilege escalation attempts in audit logs.

Meeting Management CVE-2026-20098

HIGH

Unrestricted Upload of File with Dangerous Type (CWE-434)

2026-02-04 psirt@cisco.com

Cisco Meeting Management

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Feb 04, 2026 - 17:16 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system.

This vulnerability is due to improper input validation in certain sections of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to upload arbitrary files to the affected system. The malicious files could overwrite system files that are processed by the root system account and allow arbitrary command execution with root privileges. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of video operator.

AnalysisAI

Unauthenticated file upload in Cisco Meeting Management's Certificate Management interface allows authenticated attackers to write arbitrary files and execute commands with root privileges on affected systems. An attacker with valid credentials can exploit improper input validation in the web management interface to overwrite system files processed with elevated privileges, leading to complete system compromise. No patch is currently available for this vulnerability.

Technical ContextAI

Classified as CWE-434 (Unrestricted Upload of File with Dangerous Type). Affects Meeting Management. A vulnerability in the Certificate Management feature of Cisco Meeting Management could allow an authenticated, remote attacker to upload arbitrary files, execute arbitrary commands, and elevate privileges to root on an affected system.

RemediationAI

Monitor vendor advisories for a patch. Validate file types by content. Store uploads outside web root. Restrict network access to the affected service where possible.