CVE-2026-20184 - Vulnerability Analysis

Overview

Cisco Webex Services contains an authentication bypass caused by improper certificate validation in single sign-on integration with Control Hub, letting unauthenticated remote attackers impersonate any user, exploit requires crafted token submission.

Severity & Score

Impact

Unauthenticated attackers can impersonate any user, gaining unauthorized access to Cisco Webex services.

Mitigation

Update to the latest version with proper certificate validation fixes.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 17, 2026

🔴 CVE-2026-20184 - Critical (9.8) A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of imprope... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-20184/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner