Insufficient Authorization in Cisco Prime Infrastructure Log File Download Feature

CVE-2026-20189

What is CVE-2026-20189?

A vulnerability in Cisco Prime Infrastructure's log file download functionality allows an authenticated, remote attacker to exploit insufficient authorization checks in the download service API. By crafting a specific URL request, the attacker can retrieve sensitive log files that they do not have proper authorization to access. To exploit this flaw, the attacker must possess valid credentials to the web-based management interface of the affected device.

References