CVE-2020-26082

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass content filters that are configured on an affected device. The vulnerability is due to improper handling of password-protected zip files. An attacker could exploit this vulnerability by sending a malicious file inside a crafted zip-compressed file to an affected device. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.

• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-zip-bypass-gbU4gtTgVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-zip-bypass-gbU4gtTgVendor Advisory

Published

Aug 4, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26077A vulnerability in the access control functionality of Cisco…4.3
• CVE-2020-26078A vulnerability in the file system of Cisco IoT Field Networ…6.5
• CVE-2020-26079A vulnerability in the web UI of Cisco IoT Field Network Dir…4.9
• CVE-2020-2608Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26080A vulnerability in the user management functionality of Cisc…4.1
• CVE-2020-26081Multiple vulnerabilities in the web UI of Cisco IoT Field Ne…6.1
• CVE-2020-26083A vulnerability in the web-based management interface of Cis…4.8
• CVE-2020-26084A vulnerability in the REST API of Cisco Edge Fog Fabric cou…6.5
• CVE-2020-26085Multiple vulnerabilities in Cisco Jabber for Windows, Jabber…9.9
• CVE-2020-26086A vulnerability in the video endpoint API (xAPI) of Cisco Te…4.3
• CVE-2020-26088A missing CAP_NET_RAW check in NFC socket creation in net/nf…5.5
• CVE-2020-2609Vulnerability in the Enterprise Manager Base Platform produc…6.3