CVE-2026-20152
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication requests to an affected device. A successful exploit could allow the attacker to bypass policy enforcement on the device. There is no direct impact to the Cisco Secure Web Appliance. However, as a result of exploiting this vulnerability, an attacker could send HTTP requests that should be restricted through the device.
Severity
MEDIUM
CVSS score
5.3
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-04-15 17:17:02.870000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-20152",
"sourceIdentifier": "[email protected]",
"published": "2026-04-15T17:17:02.870",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements.\r\n\r\nThis vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication requests to an affected device. A successful exploit could allow the attacker to bypass policy enforcement on the device. There is no direct impact to the Cisco Secure Web Appliance. However, as a result of exploiting this vulnerability, an attacker could send HTTP requests that should be restricted through the device."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la característica del servicio de autenticación de Cisco AsyncOS Software para Cisco Secure Web Appliance podría permitir a un atacante remoto no autenticado eludir los requisitos de la política de autenticación.\n\nEsta vulnerabilidad se debe a una validación incorrecta de la entrada de autenticación proporcionada por el usuario en las solicitudes HTTP. Un atacante podría explotar esta vulnerabilidad enviando solicitudes HTTP que contienen solicitudes de autenticación específicas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante eludir la aplicación de la política en el dispositivo. No hay impacto directo en el Cisco Secure Web Appliance. Sin embargo, como resultado de explotar esta vulnerabilidad, un atacante podría enviar solicitudes HTTP que deberían ser restringidas a través del dispositivo."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Secure Web Appliance",
"defaultStatus": "unknown",
"versions": [
{
"version": "11.8.0-453",
"status": "affected"
},
{
"version": "12.5.3-002",
"status": "affected"
},
{
"version": "12.0.3-007",
"status": "affected"
},
{
"version": "12.0.3-005",
"status": "affected"
},
{
"version": "14.1.0-032",
"status": "affected"
},
{
"version": "14.1.0-047",
"status": "affected"
},
{
"version": "14.1.0-041",
"status": "affected"
},
{
"version": "12.0.4-002",
"status": "affected"
},
{
"version": "14.0.2-012",
"status": "affected"
},
{
"version": "11.8.0-414",
"status": "affected"
},
{
"version": "12.0.1-268",
"status": "affected"
},
{
"version": "11.8.1-023",
"status": "affected"
},
{
"version": "11.8.3-021",
"status": "affected"
},
{
"version": "11.8.3-018",
"status": "affected"
},
{
"version": "12.5.1-011",
"status": "affected"
},
{
"version": "11.8.4-004",
"status": "affected"
},
{
"version": "12.5.2-007",
"status": "affected"
},
{
"version": "12.5.2-011",
"status": "affected"
},
{
"version": "14.5.0-498",
"status": "affected"
},
{
"version": "12.5.4-005",
"status": "affected"
},
{
"version": "12.5.4-011",
"status": "affected"
},
{
"version": "12.0.5-011",
"status": "affected"
},
{
"version": "14.0.3-014",
"status": "affected"
},
{
"version": "12.5.5-004",
"status": "affected"
},
{
"version": "12.5.5-005",
"status": "affected"
},
{
"version": "12.5.5-008",
"status": "affected"
},
{
"version": "14.0.4-005",
"status": "affected"
},
{
"version": "14.5.1-008",
"status": "affected"
},
{
"version": "14.5.1-016",
"status": "affected"
},
{
"version": "15.0.0-355",
"status": "affected"
},
{
"version": "15.0.0-322",
"status": "affected"
},
{
"version": "12.5.6-008",
"status": "affected"
},
{
"version": "15.1.0-287",
"status": "affected"
},
{
"version": "14.5.2-011",
"status": "affected"
},
{
"version": "15.2.0-116",
"status": "affected"
},
{
"version": "14.0.5-007",
"status": "affected"
},
{
"version": "15.2.0-164",
"status": "affected"
},
{
"version": "14.5.1-510",
"status": "affected"
},
{
"version": "12.0.2-012",
"status": "affected"
},
{
"version": "12.0.2-004",
"status": "affected"
},
{
"version": "14.5.1-607",
"status": "affected"
},
{
"version": "14.5.3-033",
"status": "affected"
},
{
"version": "15.0.1-004",
"status": "affected"
},
{
"version": "15.2.1-011",
"status": "affected"
},
{
"version": "14.5.0-673",
"status": "affected"
},
{
"version": "14.5.0-537",
"status": "affected"
},
{
"version": "12.0.1-334",
"status": "affected"
},
{
"version": "14.0.1-503",
"status": "affected"
},
{
"version": "14.0.1-053",
"status": "affected"
},
{
"version": "11.8.0-429",
"status": "affected"
},
{
"version": "14.0.1-040",
"status": "affected"
},
{
"version": "14.0.1-014",
"status": "affected"
},
{
"version": "12.5.1-043",
"status": "affected"
},
{
"version": "15.2.2-009",
"status": "affected"
},
{
"version": "15.2.3-007",
"status": "affected"
},
{
"version": "15.2.4-022",
"status": "affected"
},
{
"version": "15.2.5-011",
"status": "affected"
},
{
"version": "15.2.5-013",
"status": "affected"
},
{
"version": "14.6.0-108",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-15T16:47:46.764093Z",
"id": "CVE-2026-20152",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-305"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-auth-bypass-6YZkTQhd",
"source": "[email protected]"
}
]
}