AUGUST 4, 2026

Live Feed

Back to database

Case File

CVE-2020-16257

CRITICAL · CVSS 9.8 EPSS 3.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-10-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-16257

Severity

CRITICAL

CVSS

9.8

EPSS

3.69%

Original NVD Description

Winston 1.5.4 devices are vulnerable to command injection via the API.