Anti-Malware Bypass Vulnerability in Cisco Secure Web Appliance

CVE-2026-20056

What is CVE-2026-20056?

A vulnerability exists in the Dynamic Vectoring and Streaming (DVS) Engine of Cisco AsyncOS Software for Cisco Secure Web Appliance. This security flaw could be exploited by an unauthorized, remote attacker to bypass the system's anti-malware scanner, thereby enabling the download of potentially malicious archive files. The exploitation is facilitated through the improper handling of specific archive files that should ideally be restricted. Although the malware could be downloaded onto an end user workstation, it will not execute automatically unless the end user extracts and runs the malicious file.

References