CVE-2025-20236

Summary

CVE-2025-20236 is a vulnerability affecting the custom URL parser in Cisco Webex App. This issue allows unauthenticated, remote attackers to persuade users to download arbitrary files, potentially enabling the execution of arbitrary commands on the targeted user's host. The vulnerability arises from insufficient input validation during the processing of meeting invite links. An attacker can exploit this weakness by crafting a malicious meeting invite link, leading users to inadvertently download harmful files and granting the attacker control over the targeted system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.