Skip to content
VulniPulse
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-20056

CVE-2026-20056: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

Vendor advisory comparison

Cisco

1 advisory
  • Advisory severityMedium4.0

    Medium [CVE-2026-20056] Cisco Secure Web Appliance Real-Time Scanning Archive File Bypass Vulnerability

    cisco-sa-wsa-archive-bypass-Scx2e8zFSource published Source updated

    A vulnerability in the Dynamic Vectoring and Streaming (DVS) Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is due to improper handling of certain archive files. An attacker could exploit this vulnerability by sending a crafted archive file, which should be blocked, through an affected device. A successful exploit could allow the attacker to bypass the anti-malware scanner and download malware onto an end us…

    Related products — impact not confirmed
    • Cisco Secure Web Appliance
    Source-reported affected versions
    • Scope: At the time of publication, this vulnerability affected Cisco Secure Web Appliance, both virtual and hardware versions, regardless of device configuration.
    • Release 15.2 and earlier (first fixed: 15.2.5-013)
    Source-reported fixed versions
    • 15.2.5-013
    Mitigation guidance
    • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
    • Release 15.2 and earlier: upgrade to 15.2.5-013.
    Workarounds
    • There are no workarounds that address this vulnerability.

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery