CVE-2020-36908 MEDIUM

CVE-2020-36908: Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users

Vendor Secure Computing
Product SnapGear Management Console SG560
Weakness CWE-352 · CSRF
Published January 6, 2026
Last update January 6, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.

Key dates

02Disclosure timeline

January 6, 2026 CVE published
January 6, 2026 Record updated