CVE-2026-20189 | Cisco Prime Infrastructure up to 3.10.6 Download Service API authorization (cisco-sa-pi-unauth-infodiscl-LFnLgmey)

A vulnerability has been found in Cisco Prime Infrastructure and classified as problematic. This affects an unknown function of the component Download Service API. This manipulation causes missing authorization.

This vulnerability is tracked as CVE-2026-20189. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.