CVE-2026-20155

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*

History

02 Jul 2026, 18:34

Type	Values Removed	Values Added
CPE		cpe:2.3:a:cisco:evolved_programmable_network_manager::::::::
References	~~() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3 -~~	() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3 - Vendor Advisory
First Time		Cisco Cisco evolved Programmable Network Manager

01 Apr 2026, 17:28

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-04-01 17:28

Updated : 2026-07-02 18:34

NVD link : CVE-2026-20155

Mitre link : CVE-2026-20155

CVE.ORG link : CVE-2026-20155

JSON object : View

Products Affected

cisco

evolved_programmable_network_manager

CWE

CWE-862

Missing Authorization

{"id": "CVE-2026-20155", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20155", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T18:19:08.632246Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "versions": [{"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.2.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.1.3.1"}, {"status": "affected", "version": "7.1.4"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.1.1"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "7.1.4.1"}, {"status": "affected", "version": "8.0.1.1"}], "defaultStatus": "unknown"}]}], "published": "2026-04-01T17:28:31.430", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-improp-auth-mUwFWUU3", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.\r\n\r\nThis vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised."}], "lastModified": "2026-07-02T18:34:43.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86A047C1-A2D3-403E-90D0-0D888C0E38A0", "versionEndExcluding": "8.1.2"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}