Unrated severityNVD Advisory· Published Jan 6, 2026· Updated Jan 6, 2026
Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users
CVE-2020-36908
Description
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.
Affected products
2- Range: 3.1.5
- Secure Computing/SnapGear Management Console SG560v5Range: 3.1.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- packetstorm.news/files/id/157937mitreexploit
- www.exploit-db.com/exploits/48554mitreexploit
- www.vulncheck.com/advisories/secure-computing-snapgear-management-console-sg-cross-site-request-forgery-via-admin-usersmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5567.phpmitrethird-party-advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/182969mitrevdb-entry
News mentions
0No linked articles in our index yet.