CVE-2026-20123Disclosure(cisco / evolved_programmable_network_manager)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

cisco CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-redirect-6sX82dN

Weakness type (CWE)

CWE-601

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

evolved_programmable_network_manager
prime_infrastructure

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

cisco

Products

evolved_programmable_network_managerprime_infrastructure

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.systemtek.co.uk/?p=48288

Full discourse1 post

SystemTek - Technology news website@SystemTek_UK241d
Disclosure
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Open Redirect Vulnerability (CVE-2026-20123) #Cisco #CVE202620123 #CyberSecurity https://www.systemtek.co.uk/?p=48288 https://t.co/kwgSZpfmgf
Post summary
The tweet announces the existence of CVE-2026-20123, an open‑redirect vulnerability in Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure, without providing any PoC, exploit, or patch details.
0000054
1.8K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	cisco	evolved_programmable_network_manager	-	-	-
App	cisco	prime_infrastructure	-	-	-
App	cisco	prime_infrastructure	3.10.6	-	-
App	cisco	prime_infrastructure	3.10.6	-	-

Explore more

Back to dashboard cisco CVEs evolved_programmable_network_manager vulnerabilities