CVE-2023-20026

CVE-2023-20026 is a high-severity vulnerability affecting the web-based management interface of several Cisco Small Business RV series routers (RV016, RV042, RV042G, RV082, RV320, RV325). It allows an authenticated, remote attacker to execute arbitrary commands with root-level privileges due to improper validation of user input. Exploitation requires valid administrative credentials and involves sending a crafted HTTP request. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, with articles highlighting the exposure of end-of-life devices.