CVE-2020-26066

Summary

CVE-2020-26066 is a vulnerability affecting the web UI of Cisco SD-WAN vManage Software. It allows authenticated, remote attackers to gain read and write access to sensitive information on affected systems. The issue arises from the software's mishandling of XML External Entity (XXE) entries when processing specific XML files. An attacker could exploit this vulnerability by convincing a user to import a maliciously crafted XML file. Successful exploitation could grant the attacker the ability to read and write files within the application. Cisco has issued software updates to address this vulnerability, and currently, there are no known workarounds.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.