5.3 CVE-2026-20152

Enriched by CISA
 

A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass authentication policy requirements. This vulnerability is due to improper validation of user-supplied authentication input in HTTP requests. An attacker could exploit this vulnerability by sending HTTP requests that contain specific authentication requests to an affected device. A successful exploit could allow the attacker to bypass policy enforcement on the device. There is no direct impact to the Cisco Secure Web Appliance. However, as a result of exploiting this vulnerability, an attacker could send HTTP requests that should be restricted through the device.
https://nvd.nist.gov/vuln/detail/CVE-2026-20152

Categories

CWE-305 : Authentication Bypass by Primary Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error. The provided password is only compared against the first character of the real password. The password is not properly checked, which allows remote attackers to bypass access controls by sending a 1-byte password that matches the first character of the real password. Chain: Forum software does not properly initialize an array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the password and gain administrative privileges.

References


 

AFFECTED (from MITRE)

Vendor Product Versions
Cisco Cisco Secure Web Appliance
  • 11.8.0-453 [affected]
  • 12.5.3-002 [affected]
  • 12.0.3-007 [affected]
  • 12.0.3-005 [affected]
  • 14.1.0-032 [affected]
  • 14.1.0-047 [affected]
  • 14.1.0-041 [affected]
  • 12.0.4-002 [affected]
  • 14.0.2-012 [affected]
  • 11.8.0-414 [affected]
  • 12.0.1-268 [affected]
  • 11.8.1-023 [affected]
  • 11.8.3-021 [affected]
  • 11.8.3-018 [affected]
  • 12.5.1-011 [affected]
  • 11.8.4-004 [affected]
  • 12.5.2-007 [affected]
  • 12.5.2-011 [affected]
  • 14.5.0-498 [affected]
  • 12.5.4-005 [affected]
  • 12.5.4-011 [affected]
  • 12.0.5-011 [affected]
  • 14.0.3-014 [affected]
  • 12.5.5-004 [affected]
  • 12.5.5-005 [affected]
  • 12.5.5-008 [affected]
  • 14.0.4-005 [affected]
  • 14.5.1-008 [affected]
  • 14.5.1-016 [affected]
  • 15.0.0-355 [affected]
  • 15.0.0-322 [affected]
  • 12.5.6-008 [affected]
  • 15.1.0-287 [affected]
  • 14.5.2-011 [affected]
  • 15.2.0-116 [affected]
  • 14.0.5-007 [affected]
  • 15.2.0-164 [affected]
  • 14.5.1-510 [affected]
  • 12.0.2-012 [affected]
  • 12.0.2-004 [affected]
  • 14.5.1-607 [affected]
  • 14.5.3-033 [affected]
  • 15.0.1-004 [affected]
  • 15.2.1-011 [affected]
  • 14.5.0-673 [affected]
  • 14.5.0-537 [affected]
  • 12.0.1-334 [affected]
  • 14.0.1-503 [affected]
  • 14.0.1-053 [affected]
  • 11.8.0-429 [affected]
  • 14.0.1-040 [affected]
  • 14.0.1-014 [affected]
  • 12.5.1-043 [affected]
  • 15.2.2-009 [affected]
  • 15.2.3-007 [affected]
  • 15.2.4-022 [affected]
  • 15.2.5-011 [affected]
  • 15.2.5-013 [affected]
  • 14.6.0-108 [affected]
© 2022 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

CPE

cpe start end

REMEDIATION


EXPLOITS

Exploit-db.com

id description date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
No known exploits

CAPEC

Common Attack Pattern Enumerations and Classifications

id description severity
No entry