CVE-2026-20184
Cisco Webex Meetings Certificate Validation Vulnerability
Severity
Critical 9.8
CVSS 3.1
Exploited
Not listed
EPSS
0.005
41.3th percentile
Discovered by
Vendor
Published by the vendor
Published
Apr 15, 2026
Assigned by cisco
Description
A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services.
Weakness: CWE-295
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Webex | Other Products | cna-assigner |
Vendor-reported affected versions (1)
- Cisco · Cisco Webex Meetings