Cisco Webex Meetings up to 45.4 certificate validation

Summaryinfo

A vulnerability was found in Cisco Webex Meetings and classified as critical. This issue affects some unknown processing. Such manipulation leads to certificate validation. This vulnerability is documented as CVE-2026-20184. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco Webex Meetings and classified as problematic. Affected by this issue is an unknown code. The manipulation with an unknown input leads to a certificate validation vulnerability. Using CWE to declare the problem leads to CWE-295. The product does not validate, or incorrectly validates, a certificate. Impacted is integrity. CVE summarizes:

A vulnerability in the integration of single sign-on (SSO) with Control Hub in Cisco Webex Services could have allowed an unauthenticated, remote attacker to impersonate any user within the service. This vulnerability existed because of improper certificate validation. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by connecting to a service endpoint and supplying a crafted token. A successful exploit could have allowed the attacker to gain unauthorized access to legitimate Cisco Webex services.

The advisory is available at sec.cloudapps.cisco.com. This vulnerability is handled as CVE-2026-20184 since 10/08/2025. The exploitation is known to be difficult. The attack may be launched remotely. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 04/16/2026). This vulnerability is assigned to T1587.003 by the MITRE ATT&CK project.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-22971). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Unified Communication Software

Vendor

• Cisco

Name

• Webex Meetings

Version

• 39.6
• 39.7
• 39.7.4
• 39.7.7
• 39.8
• 39.8.2
• 39.8.3
• 39.8.4
• 39.9
• 39.9.1
• 39.10
• 39.11
• 40.1
• 40.2
• 40.4
• 40.4.10
• 40.6
• 40.6.2
• 42.6
• 42.7
• 42.8
• 42.9
• 42.10
• 42.11
• 42.12
• 43.1
• 43.2
• 43.3
• 43.4
• 43.4.1
• 43.4.2
• 43.5.0
• 43.6.0
• 43.6.1
• 43.7
• 43.8
• 43.9
• 43.10
• 43.11
• 43.12
• 44.1
• 44.2
• 44.3
• 44.4
• 44.5
• 44.6
• 44.7
• 44.8
• 44.9
• 44.10
• 44.11
• 44.12
• 45.1
• 45.2
• 45.3
• 45.4

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion