CVE-2020-26067

Summary

CVE-2020-26067 is a vulnerability affecting the web-based interface of Cisco Webex Teams. An authenticated attacker can exploit this issue by creating a malicious account name with malicious HTML or script content and join a space using that name. This could lead to cross-site scripting attacks, potentially granting the attacker access to sensitive browser-based information. The root cause is improper username validation. Cisco has released software updates to address this vulnerability, and currently, there are no workarounds available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.