CVE-2020-16846
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.
CISA Known Exploited Vulnerability
Vendor / Product
SaltStack — Salt
Date Added
2021-11-03
Remediation Due
2022-05-03
https://nvd.nist.gov/vuln/detail/CVE-2020-16846