CVE-2026-20172 | Cisco Enterprise Chat and Email up to 15.0(1)_ET1 Lite Agent Feature reliance on file name or extension of externally-supplied file (cisco-sa-ece-lite-agent-BCgSN8eb)

A vulnerability, which was classified as problematic, has been found in Cisco Enterprise Chat and Email. The affected element is an unknown function of the component Lite Agent Feature. The manipulation leads to reliance on file name or extension of externally-supplied file.

This vulnerability is referenced as CVE-2026-20172. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.