Cisco Meeting Management Vulnerability Let Remote Attacker Upload Arbitrary Files

A high-severity security advisory has been issued for a critical vulnerability in Meeting Management software. This vulnerability allows authenticated remote attackers to upload harmful files and gain complete control over the affected system.

The security flaw, identified as CVE-2026-20098, carries a high severity rating because it enables “root” access, the highest level of administrative permission on a device.

If an attacker successfully exploits this weakness, they can bypass security restrictions and take complete control of the server.

The core of this problem lies in the Certificate Management feature of the Cisco Meeting Management web interface. Typically, this feature is used to manage digital certificates, which are like ID cards for websites.

However, due to improper input validation, the system fails to verify the files users upload properly.

“Input validation” is a security…