CVE-2020-36908CWE-352

Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users

Medium · published January 6, 2026

CVSS v4.0
5.1
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00276 · 19.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-01-06T15:52Z
EPSS history
Timeline
  • 06 JAN 15:52Z
    Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users
    cvelistv5