CVE-2026-20172 Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability

A vulnerability in the Lite Agent feature of Cisco Enterprise Chat and Email ECE could allow an authenticated, remote attacker to conduct browser-based attacks. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Agent. This...

Cisco Enterprise Chat and Email Attachment Download Vulnerability

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco. The product focuses on providing e-mail, chat, and Web callback capabilities, among other things, for other Cisco solutions. An attachment download vulnerability exists in the HTTP API for Cisco...