CVE-2026-20155

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20155", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.386Z", "datePublished": "2026-04-01T16:29:12.891Z", "dateUpdated": "2026-04-01T18:19:17.434Z"}, "containers": {"cna": {"title": "Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.\r\n\r\nThis vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3", "name": "cisco-sa-epnm-improp-auth-mUwFWUU3"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-epnm-improp-auth-mUwFWUU3", "discovery": "EXTERNAL", "defects": ["CSCwp27059"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Missing Authorization", "type": "cwe", "cweId": "CWE-862"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "versions": [{"version": "7.1.1", "status": "affected"}, {"version": "7.1.2.1", "status": "affected"}, {"version": "7.1.3", "status": "affected"}, {"version": "7.1.2", "status": "affected"}, {"version": "7.1.0", "status": "affected"}, {"version": "8.0.0", "status": "affected"}, {"version": "8.0.0.1", "status": "affected"}, {"version": "7.1.3.1", "status": "affected"}, {"version": "7.1.4", "status": "affected"}, {"version": "8.1.0", "status": "affected"}, {"version": "8.1.1", "status": "affected"}, {"version": "8.0.1", "status": "affected"}, {"version": "7.1.4.1", "status": "affected"}, {"version": "8.0.1.1", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-04-01T16:29:12.891Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T18:19:08.632246Z", "id": "CVE-2026-20155", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T18:19:17.434Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20155", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T18:19:08.632246Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T18:19:12.438Z"}}], "cna": {"title": "Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability", "source": {"defects": ["CSCwp27059"], "advisory": "cisco-sa-epnm-improp-auth-mUwFWUU3", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "versions": [{"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.2.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.1.3.1"}, {"status": "affected", "version": "7.1.4"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.1.1"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "7.1.4.1"}, {"status": "affected", "version": "8.0.1.1"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3", "name": "cisco-sa-epnm-improp-auth-mUwFWUU3"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.\r\n\r\nThis vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-862", "description": "Missing Authorization"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-04-01T16:29:12.891Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20155", "state": "PUBLISHED", "dateUpdated": "2026-04-01T18:19:17.434Z", "dateReserved": "2025-10-08T11:59:15.386Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-04-01T16:29:12.891Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "vendor": "Cisco", "versions": [{"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.2.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.1.3.1"}, {"status": "affected", "version": "7.1.4"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.1.1"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "7.1.4.1"}, {"status": "affected", "version": "8.0.1.1"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "86A047C1-A2D3-403E-90D0-0D888C0E38A0", "versionEndExcluding": "8.1.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.\r\n\r\nThis vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n basada en web de Cisco Evolved Programmable Network Manager (EPNM) podr\u00eda permitir a un atacante remoto y autenticado con privilegios bajos acceder a informaci\u00f3n sensible a la que no est\u00e1 autorizado a acceder.\n\nEsta vulnerabilidad se debe a comprobaciones de autorizaci\u00f3n inadecuadas en un endpoint de API REST de un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad consultando el endpoint afectado. Un exploit exitoso podr\u00eda permitir al atacante ver informaci\u00f3n de sesi\u00f3n de usuarios activos de Cisco EPNM, incluidos usuarios con privilegios administrativos, lo que podr\u00eda resultar en el compromiso del dispositivo afectado."}], "id": "CVE-2026-20155", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "psirt@cisco.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20155", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-01T18:19:08.632246Z", "version": "2.0.3"}}]}, "published": "2026-04-01T17:28:31.430", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.1.2.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.0.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "8.0.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.1.3.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "7.1.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.1.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.1.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "8.0.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "7.1.4.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "8.0.1.1"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "Cisco Evolved Programmable Network Manager (EPNM)", "source": "cna", "vendor": "Cisco"}, "product": "evolved_programmable_network_manager", "vendor": "cisco"}], "analysis": {"en": {"generated_at": "2026-04-02T02:44:00.981063+00:00", "value": {"mitigation_remediation": ["Apply the latest Cisco EPNM patch or upgrade to a version where the vulnerability is fixed.", "Verify that REST API access is restricted to authorized users and disable any undocumented endpoints if possible."], "summary": {"action": "Apply Patch", "impact": "Unauthorized Access to Sensitive Session Data"}, "threat_synthesis": {"affected_systems": "The vulnerability affects Cisco Evolved Programmable Network Manager. No specific affected software versions are listed in the data, so all deployments of this product should be considered potentially impacted until a vendor\u2011released patch is applied.", "description_and_impact": "A flaw in the web\u2011based management interface of Cisco Evolved Programmable Network Manager allows an authenticated attacker with low privileges to query a REST API endpoint that lacks proper authorization checks. By issuing requests to this endpoint, the attacker can obtain session information of active EPNM users, including those with administrative rights. This could enable the attacker to glean credentials or other privileged data that may facilitate a full compromise of the affected device.", "risk_and_exploitability": "The CVSS score of 8 indicates high severity, and the exploitation requires only remote authenticated access with low privileges. Although the EPSS score is not available, the fact that a low\u2011privilege attacker can gather sensitive session information represents a significant compromise risk. The vulnerability is not listed in the CISA KEV catalog, suggesting no public exploits have been documented yet, but the attack vector is inferred to be a remote web interface call."}}}}, "created": "2026-04-02T07:48:25.853067+00:00", "updated": "2026-04-03T08:58:29.901711+00:00", "vendors": ["cisco", "cisco$PRODUCT$evolved_programmable_network_manager"]}