CVE-2026-20175: Cisco Finesse File Inclusion Vulnerability
A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks. This vulnerability is due to insufficient validation of user-supplied input for HTTP requests that are sent to an affected device. An attacker who has knowledge of the address of the affected device could exploit this vulnerability by persuading a user to click a crafted link that contains the affected device address. A successful exploit could allow the attacker to conduct browser-based attacks and execute arbitrary script code in the context of the affected interface or access sensitive information on the affected device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the Cisco Finesse management/interface address to trusted IPs and networks using firewall rules, ACLs, or VPN-only access; block direct Internet access to the device.
- Compensating control
Deploy a web application firewall (WAF) or reverse proxy in front of the Finesse interface to validate and block suspicious HTTP requests that attempt to load remote files or contain crafted input.
- Compensating control
Educate users and administrators to avoid clicking unsolicited or crafted links that include device addresses; use internal bookmarks or portals to reach management interfaces.
- Compensating control
Monitor and review web/access logs and alerts for unusual HTTP requests that reference remote file locations or other indicators of attempted file-inclusion exploits and investigate any findings.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20175?
The severity of CVE-2026-20175 is medium with a score of 6.1.
What type of vulnerability is CVE-2026-20175?
CVE-2026-20175 is a file inclusion vulnerability in Cisco Finesse.
How can CVE-2026-20175 be exploited?
CVE-2026-20175 can be exploited by an unauthenticated remote attacker to load arbitrary files into an active user session.
What are the potential consequences of CVE-2026-20175?
The consequences of CVE-2026-20175 may include browser-based attacks, compromising user sessions on affected devices.
How do I protect against CVE-2026-20175?
To protect against CVE-2026-20175, ensure that user input in Cisco Finesse is properly validated to prevent unauthorized file access.