Skip to content
VulniPulse
Sign in
Advisory severityMedium5.0Cisco

Medium [CVE-2026-20028] Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

This medium-severity Cisco advisory covers CVE-2026-20028 affecting Terminal Services Agent.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

cisco-sa-ts-agent-fw-bypass-MYBTMrev Source published Source updated

VulniPulse record published Record updated

CVE-2026-20028
Affected products & platforms
CiscoUnclassified
Open source advisory

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker.

This vulnerability is due to an incorrect mapping of network connections to user accounts. An attacker with at least user-level credentials could exploit this vulnerability by sending crafted network traffic to an affected device.

A successful exploit could allow the attacker to inherit the firewall rules associated with a different user in the system.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected product named by the advisory: Terminal Services Agent.

Affected versions
  • Scope: At the time of publication, this vulnerability affected Cisco TS Agent, regardless of device configuration.
  • Release Earlier than 1.4.3 (first fixed: 1.4.3)

Official advisory · high-confidence parse· fetched 24 days ago·verify at source

Fixed versions
  • 1.4.3

Official advisory · high-confidence parse· fetched 24 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
  • Earlier than 1.4.3: upgrade to 1.4.3.
Workaround status
  • There are no workarounds that address this vulnerability.

Official advisory · high-confidence parse· fetched 24 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.