Description

A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability, and no customer action is needed. This vulnerability was due to improper filtering of user-supplied input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to conduct an XSS attack against the targeted user.

INFO

Published Date :

2026-03-04T17:24:10.454Z

Last Modified :

2026-03-04T20:52:26.015Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2026-20149 vulnerability.

Vendors Products
Cisco
  • Webex
  • Webex Meetings
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-20149.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact