CVE-2026-20184
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-04-15 17:17:03.677000
Last modified
2026-10-26 22:10:00.163000
View original CVE JSON
{
"id": "CVE-2026-20184",
"sourceIdentifier": "[email protected]",
"published": "2026-04-15T17:17:03.677",
"lastModified": "2026-10-26T22:10:00.163",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service.\r\n\r\nThis vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la integración de inicio de sesión único (SSO) con Control Hub en los servicios de Cisco Webex podría haber permitido a un atacante remoto no autenticado suplantar a cualquier usuario dentro del servicio.\n\nEsta vulnerabilidad existía debido a una validación de certificado incorrecta. Antes de que esta vulnerabilidad fuera abordada, un atacante podría haber explotado esta vulnerabilidad conectándose a un punto final de servicio y proporcionando un token manipulado. Un exploit exitoso podría haber permitido al atacante obtener acceso no autorizado a servicios legítimos de Cisco Webex."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Webex Meetings",
"defaultStatus": "unknown",
"versions": [
{
"version": "39.7.7",
"status": "affected"
},
{
"version": "39.9",
"status": "affected"
},
{
"version": "40.4.10",
"status": "affected"
},
{
"version": "39.6",
"status": "affected"
},
{
"version": "40.6.2",
"status": "affected"
},
{
"version": "39.8.2",
"status": "affected"
},
{
"version": "39.8.4",
"status": "affected"
},
{
"version": "40.1",
"status": "affected"
},
{
"version": "39.11",
"status": "affected"
},
{
"version": "39.7.4",
"status": "affected"
},
{
"version": "39.9.1",
"status": "affected"
},
{
"version": "40.4",
"status": "affected"
},
{
"version": "40.6",
"status": "affected"
},
{
"version": "39.7",
"status": "affected"
},
{
"version": "39.8",
"status": "affected"
},
{
"version": "39.8.3",
"status": "affected"
},
{
"version": "40.2",
"status": "affected"
},
{
"version": "39.10",
"status": "affected"
},
{
"version": "42.6",
"status": "affected"
},
{
"version": "42.7",
"status": "affected"
},
{
"version": "42.8",
"status": "affected"
},
{
"version": "42.9",
"status": "affected"
},
{
"version": "42.10",
"status": "affected"
},
{
"version": "42.11",
"status": "affected"
},
{
"version": "42.12",
"status": "affected"
},
{
"version": "43.1",
"status": "affected"
},
{
"version": "43.2",
"status": "affected"
},
{
"version": "43.3",
"status": "affected"
},
{
"version": "43.4",
"status": "affected"
},
{
"version": "43.4.1",
"status": "affected"
},
{
"version": "43.4.2",
"status": "affected"
},
{
"version": "43.5.0",
"status": "affected"
},
{
"version": "43.6.0",
"status": "affected"
},
{
"version": "43.6.1",
"status": "affected"
},
{
"version": "43.7",
"status": "affected"
},
{
"version": "43.8",
"status": "affected"
},
{
"version": "43.9",
"status": "affected"
},
{
"version": "43.10",
"status": "affected"
},
{
"version": "43.11",
"status": "affected"
},
{
"version": "43.12",
"status": "affected"
},
{
"version": "44.1",
"status": "affected"
},
{
"version": "44.2",
"status": "affected"
},
{
"version": "44.3",
"status": "affected"
},
{
"version": "44.4",
"status": "affected"
},
{
"version": "44.5",
"status": "affected"
},
{
"version": "44.6",
"status": "affected"
},
{
"version": "44.7",
"status": "affected"
},
{
"version": "44.8",
"status": "affected"
},
{
"version": "44.9",
"status": "affected"
},
{
"version": "44.10",
"status": "affected"
},
{
"version": "44.11",
"status": "affected"
},
{
"version": "44.12",
"status": "affected"
},
{
"version": "45.1",
"status": "affected"
},
{
"version": "45.2",
"status": "affected"
},
{
"version": "45.3",
"status": "affected"
},
{
"version": "45.4",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-15T00:00:00+00:00",
"id": "CVE-2026-20184",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-295"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL",
"source": "[email protected]"
}
]
}