Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2026-20155

Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Evolved Programmable Network Manager (EPNM)

Default version status: unknown

  • 7.1.1affected
  • 7.1.2.1affected
  • 7.1.3affected
  • 7.1.2affected
  • 7.1.0affected
  • 8.0.0affected
  • 8.0.0.1affected
  • 7.1.3.1affected
  • 7.1.4affected
  • 8.1.0affected
  • 8.1.1affected
  • 8.0.1affected
  • 7.1.4.1affected
  • 8.0.1.1affected

References