VDB

GCVE-110-NCSC-2026-122

GCVE-110-NCSC-2026-122
Advisory PublishedCVSS 9.8/10
Vulnetix · Advisory published April 17, 2026
A vulnerability in Cisco Webex Services' SSO integration with Control Hub due to improper certificate validation could allow an unauthenticated remote attacker to impersonate any user and gain unauthorized access.
Download JSON Open in Console

Weaknesses (CWE)

CWE-295Improper Certificate Validation

Risk Scores

CVSS 3.1
9.8/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
Ciscovers:unknown/*——

Aliases

CVE-2026-20184

References

advisory
advisory
advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›