CVE-2026-20155

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Evolved Programmable Network Manager (EPNM) podría permitir a un atacante remoto y autenticado con privilegios bajos acceder a información sensible a la que no está autorizado a acceder. Esta vulnerabilidad se debe a comprobaciones de autorización inadecuadas en un endpoint de API REST de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad consultando el endpoint afectado. Un exploit exitoso podría permitir al atacante ver información de sesión de usuarios activos de Cisco EPNM, incluidos usuarios con privilegios administrativos, lo que podría resultar en el compromiso del dispositivo afectado.

Information

Published : 2026-04-01 17:28

Updated : 2026-10-26 21:10

NVD link : CVE-2026-20155

Mitre link : CVE-2026-20155

CVE.ORG link : CVE-2026-20155

JSON object : View

Products Affected

cisco

evolved_programmable_network_manager

CWE

CWE-862

Missing Authorization

{"id": "CVE-2026-20155", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20155", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T18:19:08.632246Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "versions": [{"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.2.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.1.3.1"}, {"status": "affected", "version": "7.1.4"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.1.1"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "7.1.4.1"}, {"status": "affected", "version": "8.0.1.1"}], "defaultStatus": "unknown"}]}], "published": "2026-04-01T17:28:31.430", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.\r\n\r\nThis vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n basada en web de Cisco Evolved Programmable Network Manager (EPNM) podr\u00eda permitir a un atacante remoto y autenticado con privilegios bajos acceder a informaci\u00f3n sensible a la que no est\u00e1 autorizado a acceder.\n\nEsta vulnerabilidad se debe a comprobaciones de autorizaci\u00f3n inadecuadas en un endpoint de API REST de un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad consultando el endpoint afectado. Un exploit exitoso podr\u00eda permitir al atacante ver informaci\u00f3n de sesi\u00f3n de usuarios activos de Cisco EPNM, incluidos usuarios con privilegios administrativos, lo que podr\u00eda resultar en el compromiso del dispositivo afectado."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86A047C1-A2D3-403E-90D0-0D888C0E38A0", "versionEndExcluding": "8.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}