CVE-2026-20189

A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device.

• CWE-862

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-unauth-infodiscl-LFnLgmeyVendor Advisory

Published

May 6, 2026

Last Modified

Jun 29, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20182May 2026: This security advisory provides the details and fi…10
• CVE-2026-20184A vulnerability in the integration of single sign-on (SSO) w…9.8
• CVE-2026-20185A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2026-20186A vulnerability in Cisco Identity Services Engine (ISE) coul…9.9
• CVE-2026-20187As part of Cisco's ongoing commitment to proactive security …7.5
• CVE-2026-20188Following the initial publication of the Security Advisory a…0
• CVE-2026-2019The Cart All In One For WooCommerce plugin for WordPress is …7.2
• CVE-2026-20190A vulnerability in Cisco ISE and ISE-PIC could allow an unau…7.5
• CVE-2026-20191A vulnerability in Cisco Catalyst Center could allow an unau…7.5
• CVE-2026-20193A vulnerability in the RADIUS Policy API endpoints of Cisco …4.3
• CVE-2026-20195A vulnerability in an identity management API endpoint of Ci…5.3
• CVE-2026-20198A vulnerability in the web-based management interface of Cis…4.8