Cisco · Webex App · CVE-2026-20178
**Name of the Vulnerable Software and Affected Versions**
Cisco Webex App (affected versions not specified)
**Description**
An issue in the browser-based version of the application allows an unauthenticated remote attacker to redirect users to a malicious webpage. This occurs due to improper input validation of URL parameters in an HTTP request. An attacker can exploit this by persuading a user to click a specially crafted URL.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.