[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffttv1T7iyBaCbQG26m35MmFLkn3cgBdPiOnegDf1hf4":3},{"article":4,"iocs":50,"watch_terms":55,"solutions":56,"lesson":157},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"c7834a4c-79e6-4c4a-9f60-0e6dae5fafca","CVE-2026-20362 | Cisco Finesse Server-Side Request Forgery Vulnerability","cve-2026-20362-cisco-finesse-server-side-request-forgery-vulnerability-41dca7","CVE-2026-20362 is a high-severity SSRF vulnerability in Cisco Finesse discovered by Horizon3 researchers, with affected versions, mitigations, and a NodeZero Rapid Response test.","CVE-2026-20362 is a high-severity server-side request forgery (SSRF) vulnerability in Cisco Finesse's web-based management interface discovered by Horizon3 researchers. An unauthenticated remote attacker can send crafted HTTP requests to obtain sensitive information from associated internal services, with a CVSS score of 7.2. No fixes are available as of October 27, 2026, with patches scheduled for January–February 2027.","Cisco Finesse SSRF vulnerability CVE-2026-20362 allows unauthenticated remote attackers to enumerate infrastructure.","https:\u002F\u002Fhorizon3.ai\u002Fattack-research\u002Fvulnerabilities\u002Fcve-2026-20362\u002F","https:\u002F\u002Fhorizon3.ai\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fcve-2026-20362-cisco-finesse-ssrf.png","2026-10-28T13:13:26+00:00","2026-10-28T14:00:16.883518+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"Cisco","vendor",{"name":21,"type":22},"Cisco Finesse","product",{"name":24,"type":22},"Cisco Packaged Contact Center Enterprise",{"name":26,"type":22},"Cisco Unified Contact Center Express",{"name":28,"type":19},"Horizon3",{"name":30,"type":31},"Apache Shindig","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,48],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":49},{"id":32,"icon":34,"name":35,"slug":36},[51],{"type":52,"value":53,"context":54},"cve","CVE-2026-20362","High-severity SSRF vulnerability in Cisco Finesse web-based management interface",[18,28,21],{"controls":57,"vendors":145},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"slug":88,"name":89,"problem":90,"products":91},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":117,"name":118,"problem":119,"products":120},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",[146,151],{"slug":147,"name":18,"logo_path":148,"roles":149},"cisco","\u002Fvendor-logos\u002Fcisco.png",[150],"affected",{"slug":152,"name":153,"logo_path":154,"roles":155},"horizon3-ai","Horizon3.ai","\u002Fvendor-logos\u002Fhorizon3-ai.png",[156],"reported_by",{"slug":158,"title":159,"body":160,"framework_refs":161,"framework_notes":169},"cisco-finesse-ssrf-flaw-leaves-internal-services-exposed-with-no-fix-until-2027","Cisco Finesse SSRF Flaw Leaves Internal Services Exposed with No Fix Until 2027","A high-severity SSRF vulnerability in Cisco Finesse's web management interface allows unauthenticated attackers to send crafted HTTP requests that trick the server into querying internal services, potentially exposing sensitive data from backend systems. The critical issue is compounded by the absence of an available patch, with remediation not expected until January–February 2027 — leaving organizations in a prolonged exposure window of several months. SSRF vulnerabilities are particularly dangerous in contact center environments like Finesse, which often have privileged access to internal APIs, databases, and customer data. This incident underscores the importance of compensating controls when vendor patches are unavailable, and the need for proactive vulnerability tracking and network-level mitigations.",[162,163,164,165,166,167,168],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","PCI DSS Requirement 6",{"NIS2 Article 21(2)(b)":170,"PCI DSS Requirement 6":171,"NIST SP 800-53 SI-2: Flaw Remediation":172,"OWASP A06:2021 Vulnerable and Outdated Components":173,"CIS Control 7: Continuous Vulnerability Management":174,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":175,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":176},"NIS2 requires essential and important entities to implement incident handling and risk management measures including vulnerability handling policies — the delayed patch timeline makes compensating control obligations under NIS2 directly relevant.","Requirement 6 mandates that organizations protect systems and software from known vulnerabilities through patching and vulnerability management; contact center environments like Finesse often process cardholder data, making this control directly applicable.","SI-2 requires organizations to identify, report, and correct system flaws, and to deploy patches within defined timeframes — when vendor patches are unavailable, it mandates documented compensating controls, directly addressing the months-long patch gap here.","The Cisco Finesse component contains a known, unpatched high-severity vulnerability; OWASP A06 specifically addresses the risk of running software with known flaws and calls for patch management and component risk assessment processes.","This vulnerability was publicly disclosed with a CVSS of 7.2 and no patch available; continuous vulnerability scanning and a formal process for tracking unpatched high-severity flaws would have ensured compensating controls were applied immediately upon disclosure.","This control requires timely identification of technical vulnerabilities and evaluation of organizational exposure, including the implementation of mitigating measures when patches are not yet available from the vendor.","The SSRF flaw is exploitable by unauthenticated attackers; enforcing strict access controls and authentication requirements on the Finesse management interface would have raised the bar for exploitation even without a patch."]