CVE-2026-20155

{
  "id": "CVE-2026-20155",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-01T17:28:31.430",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.\r\n\r\nThis vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Evolved Programmable Network Manager (EPNM) podría permitir a un atacante remoto y autenticado con privilegios bajos acceder a información sensible a la que no está autorizado a acceder.\n\nEsta vulnerabilidad se debe a comprobaciones de autorización inadecuadas en un endpoint de API REST de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad consultando el endpoint afectado. Un exploit exitoso podría permitir al atacante ver información de sesión de usuarios activos de Cisco EPNM, incluidos usuarios con privilegios administrativos, lo que podría resultar en el compromiso del dispositivo afectado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco Evolved Programmable Network Manager (EPNM)",
          "defaultStatus": "unknown",
          "versions": [
            {
              "version": "7.1.1",
              "status": "affected"
            },
            {
              "version": "7.1.2.1",
              "status": "affected"
            },
            {
              "version": "7.1.3",
              "status": "affected"
            },
            {
              "version": "7.1.2",
              "status": "affected"
            },
            {
              "version": "7.1.0",
              "status": "affected"
            },
            {
              "version": "8.0.0",
              "status": "affected"
            },
            {
              "version": "8.0.0.1",
              "status": "affected"
            },
            {
              "version": "7.1.3.1",
              "status": "affected"
            },
            {
              "version": "7.1.4",
              "status": "affected"
            },
            {
              "version": "8.1.0",
              "status": "affected"
            },
            {
              "version": "8.1.1",
              "status": "affected"
            },
            {
              "version": "8.0.1",
              "status": "affected"
            },
            {
              "version": "7.1.4.1",
              "status": "affected"
            },
            {
              "version": "8.0.1.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 8.0,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-01T18:19:08.632246Z",
          "id": "CVE-2026-20155",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "8.1.2",
              "matchCriteriaId": "86A047C1-A2D3-403E-90D0-0D888C0E38A0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}