InfoSecBulletin Cybersecurity for mankind
Cisco issued a security advisory about a serious vulnerability in its Webex App that allows unauthenticated remote code execution (RCE) via malicious meeting invite links. The flaw, known as CVE-2025-20236, has a CVSS score of 8.8 and affects several versions of the Cisco Webex desktop application.
“A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user,” Cisco stated in its advisory.
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
Daily Cyber security update for 08.11. 2026
Japan banking crisis
Outage causes disruption at 128 japan banks: preventing ATM transaction
Daily Cyber security update for 06.11. 2026
Cyber attack causes French bank Credit Mutuel Arkea €100 million missing
OpenAI AI Pipeline Discovers 948 Linux Kernel Privilege Escalation Flaws in 30 Hours
Bangladeshi Researcher Rasel Earns First Apple CVE Recognition for Model I/O Flaw
The flaw is due to inadequate input validation in the Webex App’s handling of custom URLs. An attacker can create a malicious Webex meeting link that tricks users into clicking it, causing arbitrary files to download to their devices.
“A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the targeted user,” Cisco warns. Any user with a vulnerable version of the Webex App is at risk, regardless of their operating system or configuration.
As of now, Cisco’s Product Security Incident Response Team (PSIRT) has not seen any malicious use or public exploitation of CVE-2025-20236.
Cisco has confirmed the following:
Versions 44.5 and earlier: Not vulnerable
Version 44.6: Fixed in 44.6.2.30589
Version 44.7: Must migrate to a fixed release
Versions 44.8 and later: Not vulnerable
Users are strongly advised to check their application version and update immediately to avoid exploitation.
Apple released emergency security updates for 2 zero-day vulns
