6.5
Medium
CVE-2026-76438 A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow…
Description
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device. This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to alter configurations on select pages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco BroadWorks | 26.0 | No fix stated |
| Cisco BroadWorks | 25.0 | No fix stated |
| Cisco BroadWorks | 24.0 | No fix stated |
| Cisco BroadWorks | 23.0 | No fix stated |
| Cisco BroadWorks | 22.0 | No fix stated |
| Cisco BroadWorks | 21.0 | No fix stated |
| Cisco BroadWorks | 21.sp1 | No fix stated |
References
- cisco-sa-auth-bypass-broadwor-57m9dmm5 sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco BroadWorks
The 21 CVEs of Cisco BroadWorks →
CVE-2026-20320
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote…
7.5
High
CVE-2025-20307
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow…
4.8
Medium
CVE-2025-20211
A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an…
6.1
Medium
CVE-2025-20165
A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to…
7.5
High