CVE-2026-20170

A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed this vulnerability in the Cisco Webex Contact Center service, and no customer action is needed. This vulnerability existed because HTML and script content was not properly handled. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to steal sensitive information from the browser, including authentication and session information.

• CWE-80

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webexcc-xss-WEX5nUnAVendor Advisory

Published

Apr 15, 2026

Last Modified

Jul 1, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20165In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, a…6.5
• CVE-2026-20166In Splunk Enterprise versions below 10.2.1 and 10.0.4, and S…5.4
• CVE-2026-20167A vulnerability in the web-based management interface of Cis…7.7
• CVE-2026-20168A vulnerability in the web-based management interface of Cis…6.5
• CVE-2026-20169A vulnerability in the web-based management interface of Cis…6.4
• CVE-2026-2017A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(…9.8
• CVE-2026-20171A vulnerability in the Border Gateway Protocol (BGP) en…6.8
• CVE-2026-20172A vulnerability in the Lite Agent feature of Cisco Enterpris…4.3
• CVE-2026-20174A vulnerability in the Metadata update feature of Cisco Nexu…4.9
• CVE-2026-20175A vulnerability in Cisco Finesse could allow an unauthentica…6.1
• CVE-2026-20178A vulnerability in the browser-based version of Cisco Webex …4.3
• CVE-2026-2018A flaw has been found in itsourcecode School Management Syst…9.8