CVE-2026-20178

Name of the Vulnerable Software and Affected Versions Cisco Webex App (affected versions not specified)

Description An issue in the browser-based version of the application allows an unauthenticated remote attacker to redirect users to a malicious webpage. This occurs due to improper input validation of URL parameters in an HTTP request. An attacker can exploit this by persuading a user to click a specially crafted URL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.