VulnSocial

CVE-2026-20362

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated with the affected device.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 2 mentions (2026-10-07); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-10-07: 2Mentions · 2026-10-08: 210-0710-08
Referenced assets3 URLs
Full discourse4 posts
  • yousukezan@yousukezan

    Ciscoは、コンタクトセンター向け製品Finesseに、認証なしで悪用可能なサーバーサイドリクエストフォージェリ（SSRF）の脆弱性CVE-2026-20362が存在すると公表した。詳細はすでに公開されているが、修正版の提供は2027年1月から2月の予定で、回避策はない。 原因は管理画面のHTTPリクエストの入力検証不備だ。攻撃者が細工したリクエストを送ると、Finesseが攻撃者に代わって通信を行い、関連サービスの限定的な機密情報を取得される可能性がある。機器の設定に関係なく影響する。対象はFinesse、Packaged CCE、Unified CCE、Unified CCXで、Unified Intelligence Centerは対象外。修正版はPackaged CCEとUnified CCEの15.0向けが2027年1月、FinesseとUnified CCXの15.0向けが同年2月に予定されている。CVSSは7.2。Ciscoは現時点で悪用を把握していない。 https://securityonline.info/cisco-finesse-vulnerability-cve-2026-20362/

    00000980
    16.1K followersView on X
  • Daily CyberSecurity@Daily_CyberSec

    A Cisco Finesse vulnerability, SSRF flaw CVE-2026-20362, has been publicly disclosed. Fixes arrive in early 2027, with no workarounds. #Cisco #CiscoFinesse #ContactCenter #CVE202620362 #SSRF #Horizon3 #UnifiedCCX #Vulnerability https://securityonline.info/cisco-finesse-vulnerability-cve-2026-20362/

    00000304
    13.0K followersView on X
  • Kaitan ID Security@KaitanSecurity

    ⚠️ HIGH — CVE-2026-20362 Cisco Finesse Server-Side Request Forgery Vulnerability CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-20362 #Cisco #CyberSecurity #InfoSec

    0000036
    89 followersView on X
  • VulniPulse@vulnipulse

    CVE advisory (HIGH): CVE-2026-20362 - cisco: Cisco Finesse Server-Side Request Forgery Vulnerability. https://vulnipulse.com/advisories/cisco-cisco-sa-finesse-ssrf-mmsuyugs #CVE #CyberSecurity #Cisco #CiscoFinesse

    0000026
    7 followersView on X

Explore more

Back to dashboard