CVE-2026-20155
published 2026-04-01CVE-2026-20155: A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with…
PriorityP351high8CVSS 3.1
AVNACLPRLUIRSUCHIHAH
EPSS
0.27%
18.7th percentile
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.
This vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | cisco_evolved_programmable_network_manager | — | — |
| cisco | evolved_programmable_network_manager | < 8.1.2 | 8.1.2 |
| cisco | evolved_programmable_network_manager | — | — |
CVSS provenance
nvdv3.18.0HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
vendor_cisco3.1
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g5c4-x88j-p4hw: A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attack
ghsa_unreviewed·2026-04-01
CVE-2026-20155 [HIGH] CWE-862 GHSA-g5c4-x88j-p4hw: A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attack
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access.
This vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised.
Cisco
Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability
vendor_cisco·CVSS 3.1
CVE-2026-20155 Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability
CVE-2026-20155: Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are not authorized to access. This vulnerability is due to improper authorization checks on a REST API endpoint of an affected device. An attacker could exploit this vulnerability by querying the affected endpoint. A successful exploit could allow the attacker to view session information of active Cisco EPNM users, including users with administrative privileges, which could result in the affected device being compromised. Cisco has released software updates that address this vulnerabi
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-01
Published