CVE-2020-26076

CVE-2020-26076 describes a critical vulnerability in Cisco IoT Field Network Director (FND) that allows an unauthenticated, remote attacker to access sensitive database information. This flaw stems from a lack of authentication for sensitive data, enabling an attacker to exploit it by sending crafted curl commands. With a CVSS score of 7.5 (HIGH), the vulnerability has a low attack complexity and requires no user interaction, potentially leading to a complete compromise of confidentiality. While no public exploit code (Metasploit, Nuclei, ExploitDB) or active exploitation has been observed, and community discussion is minimal, organizations using affected Cisco FND products should prioritize patching.