CVE 4 MEDIUM

Cisco Secure Web Appliance TBD Bypass Vulnerability_CVE-2026-20056

4 / 10
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Description

A vulnerability in the Dynamic Vectoring and Streaming (DVS) Engine implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypass the anti-malware scanner, allowing malicious archive files to be downloaded.

This vulnerability is due to improper handling of certain archive files. An attacker could exploit this vulnerability by sending a crafted archive file, which should be blocked, through an affected device. A successful exploit could allow the attacker to bypass the anti-malware scanner and download malware onto an end user workstation. The downloaded malware will not automatically execute unless the end user extracts and launches the malicious file. 

Basic Information

ID CVE-2026-20056
Source cisco
Published Feb 4, 2026 at 16:11
Modified Feb 4, 2026 at 16:40

Affected Product

Vendor Cisco
Product Cisco Secure Web Appliance
Version 11.8.0-453
Affected Versions Cisco Cisco Secure Web Appliance 11.8.0-453
Cisco Cisco Secure Web Appliance 12.5.3-002
Cisco Cisco Secure Web Appliance 12.0.3-007
Cisco Cisco Secure Web Appliance 12.0.3-005
Cisco Cisco Secure Web Appliance 14.1.0-032
Cisco Cisco Secure Web Appliance 14.1.0-047
Cisco Cisco Secure Web Appliance 14.1.0-041
Cisco Cisco Secure Web Appliance 12.0.4-002
Cisco Cisco Secure Web Appliance 14.0.2-012
Cisco Cisco Secure Web Appliance 11.8.0-414
Cisco Cisco Secure Web Appliance 12.0.1-268
Cisco Cisco Secure Web Appliance 11.8.1-023
Cisco Cisco Secure Web Appliance 11.8.3-021
Cisco Cisco Secure Web Appliance 11.8.3-018
Cisco Cisco Secure Web Appliance 12.5.1-011
Cisco Cisco Secure Web Appliance 11.8.4-004
Cisco Cisco Secure Web Appliance 12.5.2-007
Cisco Cisco Secure Web Appliance 12.5.2-011
Cisco Cisco Secure Web Appliance 14.5.0-498
Cisco Cisco Secure Web Appliance 12.5.4-005
Cisco Cisco Secure Web Appliance 12.5.4-011
Cisco Cisco Secure Web Appliance 12.0.5-011
Cisco Cisco Secure Web Appliance 14.0.3-014
Cisco Cisco Secure Web Appliance 12.5.5-004
Cisco Cisco Secure Web Appliance 12.5.5-005
Cisco Cisco Secure Web Appliance 12.5.5-008
Cisco Cisco Secure Web Appliance 14.0.4-005
Cisco Cisco Secure Web Appliance 14.5.1-008
Cisco Cisco Secure Web Appliance 14.5.1-016
Cisco Cisco Secure Web Appliance 15.0.0-355
Cisco Cisco Secure Web Appliance 15.0.0-322
Cisco Cisco Secure Web Appliance 12.5.6-008
Cisco Cisco Secure Web Appliance 15.1.0-287
Cisco Cisco Secure Web Appliance 14.5.2-011
Cisco Cisco Secure Web Appliance 15.2.0-116
Cisco Cisco Secure Web Appliance 14.0.5-007
Cisco Cisco Secure Web Appliance 15.2.0-164
Cisco Cisco Secure Web Appliance 14.5.1-510
Cisco Cisco Secure Web Appliance 12.0.2-012
Cisco Cisco Secure Web Appliance 12.0.2-004
Cisco Cisco Secure Web Appliance 14.5.1-607
Cisco Cisco Secure Web Appliance 14.5.3-033
Cisco Cisco Secure Web Appliance 15.0.1-004
Cisco Cisco Secure Web Appliance 15.2.1-011
Cisco Cisco Secure Web Appliance 14.5.0-673
Cisco Cisco Secure Web Appliance 14.5.0-537
Cisco Cisco Secure Web Appliance 12.0.1-334
Cisco Cisco Secure Web Appliance 14.0.1-503
Cisco Cisco Secure Web Appliance 14.0.1-053
Cisco Cisco Secure Web Appliance 11.8.0-429
Cisco Cisco Secure Web Appliance 14.0.1-040
Cisco Cisco Secure Web Appliance 14.0.1-014
Cisco Cisco Secure Web Appliance 12.5.1-043
Cisco Cisco Secure Web Appliance 15.2.2-009
Cisco Cisco Secure Web Appliance 15.5.0-566
Cisco Cisco Secure Web Appliance 15.2.3-007
Cisco Cisco Secure Web Appliance 15.5.0-574
Cisco Cisco Secure Web Appliance 15.5.0-710
Cisco Cisco Secure Web Appliance 15.2.4-022
Cisco Cisco Secure Web Appliance 15.5.1-002

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.