CVE-2026-20056

A vulnerability in the Dynamic Vectoring and Streaming (DVS) Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded. This vulnerability is due to improper handling of certain archive files. An attacker could exploit this vulnerability by sending a crafted archive file, which should be blocked, through an affected device. A successful exploit could allow the attacker to bypass the anti-malware scanner and download malware onto an end user workstation. The downloaded malware will not automatically execute unless the end user extracts and launches the malicious file. 

• CWE-494

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-archive-bypass-Scx2e8zF

Published

Feb 4, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20050A vulnerability in the Do Not Decrypt exclusion feature of t…6.8
• CVE-2026-20051A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress…7.4
• CVE-2026-20052A vulnerability in the memory management handling for the Sn…5.8
• CVE-2026-20053Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2026-20054Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2026-20055Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2026-20057Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2026-20058Multiple Cisco products are affected by vulnerabilities in t…5.8
• CVE-2026-20059A vulnerability in the web-based management interface of Cis…6.1
• CVE-2026-2006Missing validation of multibyte character length in PostgreS…8.8
• CVE-2026-20060A vulnerability in the web-based management interface of Cis…4.7
• CVE-2026-20061A vulnerability in the web-based management interface of Cis…6.5