Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-20152

CVE-2026-20152: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Cisco

1 advisory
  • Advisory severityMedium5.3

    Medium [CVE-2026-20152] Cisco Secure Web Appliance Authentication Bypass Vulnerability

    cisco-sa-wsa-auth-bypass-6YZkTQhdSource published Source updated

    A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication requests to an affected device. A successful exploit could allow the attacker to bypass policy enforcement on the device. There is no direct impact to the Cisco Secure Web Appliance. However, as a result of exploiting this vulnerability, an attacker could send HTTP requests that should be restricted through the device. Cisco has released software updates that address this…

    Related products — impact not confirmed
    • Secure Web Appliance
    Source-reported affected versions
    • Scope: At the time of publication, this vulnerability affected Cisco Secure Web Appliance, both virtual and hardware versions.
    • Earlier than 15.2 — Migrate to a fixed release
    • Release 15.2 (first fixed: 15.2.5-013)
    • 15.5 — Migrate to a fixed release

    1 more entries in the full advisory.

    Source-reported fixed versions
    • 15.2.5-013
    • Not affected
    Mitigation guidance
    • Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
    • Earlier than 15.2: migrate to a fixed release.
    • Release 15.2: upgrade to 15.2.5-013.
    • Release 15.5: migrate to a fixed release.

    1 more entries in the full advisory.

    Workarounds
    • There are no workarounds that address this vulnerability.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features