CVE-2026-20362

Name of the Vulnerable Software and Affected Versions Cisco Finesse (affected versions not specified)

Description An issue in the web-based management interface allows an unauthenticated remote attacker to perform server-side request forgery (SSRF) attacks. This occurs due to improper input validation for specific HTTP requests. By sending a crafted HTTP request, an attacker can obtain limited sensitive information from services associated with the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.