CVE-2026-20167: A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authe

Q: How do I fix CVE-2026-20167?

iot field network director: upgrade to 5.0.0-117. Exact commands for each OS are on this page.

Q: Is CVE-2026-20167 being exploited?

CVE-2026-20167 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2026-20167 affect?

CVE-2026-20167 affects iot field network director. Severity is high (CVSS 7.7). A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due

Routine

HIGH 7.7UPGRADE

CVE-2026-20167 is a high-severity flaw (CVSS 7.7) affecting iot field network director. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due to improper error handling. An attacker could exploit this vulnerability by submitting crafted input to the web-based management interface. A successful exploit could allow the attacker to request unauthorized

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	7.7 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.3% (top 80%)
CISA exploited list	No
Weakness	CWE-284
Published	2026-05-06
Last modified	2026-10-26

Publisher (CNA): Cisco Systems, Inc. · Vendor: cisco

Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2026-05-06 17:16 UTCPublished CVE record published
2026-10-26 19:10 UTCUpdated Record last modified

cisco iot field network director UPGRADE

Affected: < 5.0.0-117

Fixed in: 5.0.0-117

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy iot-field-network-director || rpm -q iot-field-network-director || iot-field-network-director --version

2. UPGRADE to 5.0.0-117 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade iot-field-network-director

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade iot-field-network-director

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-20167?

iot field network director: upgrade to 5.0.0-117. Exact commands for each OS are on this page.

Is CVE-2026-20167 being exploited?

CVE-2026-20167 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-20167 affect?

CVE-2026-20167 affects iot field network director. Severity is high (CVSS 7.7). A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due

How urgent is CVE-2026-20167?

Priority 32/100. High severity

Software pages

Cisco vulnerabilities

Related CVEs

CVE-2026-20168 MEDIUM 6.5 UPGRADE A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authe
CVE-2026-20169 MEDIUM 6.4 UPGRADE A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authe

References

← Back to latest CVEs