CVE-2026-20233Disclosure(cisco / webex_meetings)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed. This vulnerability existed because of insufficient validation of user input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to execute arbitrary script code in the browser of the targeted user or access sensitive, browser-based information.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • webex_meetings

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-06-04); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
Products
webex_meetings

56 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-04: 2Mentions · 2026-06-06: 1Technical Details · 2026-06-04: 2Technical Details · 2026-06-06: 106-0406-06
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-042
Disclosure2
2026-06-061
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-20233 A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… https://www.cve.org/CVERecord?id=CVE-2026-20233

    Post summary

    The post announces a CVE‑2026‑20233 security flaw in Cisco Webex Meetings, detailing it as an unauthenticated XSS vulnerability. No proof of concept, exploit code, or evidence of active exploitation is provided.

    00100267
    57.6K followersView on X
  • SystemTek - Technology news website@SystemTek_UK
    Disclosure

    Cisco Webex Meetings Cross-Site Scripting Vulnerability (CVE-2026-20233) https://www.systemtek.co.uk/2026/06/cisco-webex-meetings-cross-site-scripting-vulnerability-cve-2026-20233/ via @SystemTek_UK

    Post summary

    The tweet announces a new XSS vulnerability (CVE‑2026‑20233) in Cisco Webex Meetings but provides only basic information and no details on exploitation, patches, or PoC.

    0000041
    1.8K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20233 A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… https://www.cve.org/CVERecord?id=CVE-2026-20233 ----- Traducción: CVE-2026-20233 Una… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-20233, a cross‑site scripting flaw in Cisco Webex Meetings that could allow unauthenticated remote attackers, citing the official CVE record.

    0000056
    79 followersView on X
CPE platform detail56 entries

56 of 56 entries

PartVendorProductVersionTarget SWTarget HW
Appciscowebex_meetings39.10.0--
Appciscowebex_meetings39.11.0--
Appciscowebex_meetings39.6.0--
Appciscowebex_meetings39.7.0--
Appciscowebex_meetings39.7.4--
Appciscowebex_meetings39.7.7--
Appciscowebex_meetings39.8.0--
Appciscowebex_meetings39.8.2--
Appciscowebex_meetings39.8.3--
Appciscowebex_meetings39.8.4--
Appciscowebex_meetings39.9.0--
Appciscowebex_meetings39.9.1--
Appciscowebex_meetings40.1.0--
Appciscowebex_meetings40.2.0--
Appciscowebex_meetings40.4.0--
Appciscowebex_meetings40.4.10--
Appciscowebex_meetings40.6.0--
Appciscowebex_meetings40.6.2--
Appciscowebex_meetings42.10.0--
Appciscowebex_meetings42.11.0--
Appciscowebex_meetings42.12.0--
Appciscowebex_meetings42.6.0--
Appciscowebex_meetings42.7.0--
Appciscowebex_meetings42.8.0--
Appciscowebex_meetings42.9.0--
Appciscowebex_meetings43.1.0--
Appciscowebex_meetings43.10.0--
Appciscowebex_meetings43.11.0--
Appciscowebex_meetings43.12.0--
Appciscowebex_meetings43.2.0--
Appciscowebex_meetings43.3.0--
Appciscowebex_meetings43.4.0--
Appciscowebex_meetings43.4.1--
Appciscowebex_meetings43.4.2--
Appciscowebex_meetings43.5.0--
Appciscowebex_meetings43.6.0--
Appciscowebex_meetings43.6.1--
Appciscowebex_meetings43.7.0--
Appciscowebex_meetings43.8.0--
Appciscowebex_meetings43.9.0--
Appciscowebex_meetings44.1.0--
Appciscowebex_meetings44.10.0--
Appciscowebex_meetings44.11.0--
Appciscowebex_meetings44.12.0--
Appciscowebex_meetings44.2.0--
Appciscowebex_meetings44.3.0--
Appciscowebex_meetings44.4.0--
Appciscowebex_meetings44.5.0--
Appciscowebex_meetings44.6.0--
Appciscowebex_meetings44.7.0--
Appciscowebex_meetings44.8.0--
Appciscowebex_meetings44.9.0--
Appciscowebex_meetings45.1.0--
Appciscowebex_meetings45.2.0--
Appciscowebex_meetings45.3.0--
Appciscowebex_meetings45.4.0--

Explore more