16 April 2026 - 23:16
Category: IT Fail
Webex Forgets How Certificates Work
Webex decided certificate validation was purely optional for their SSO integration. It turns out letting unauthenticated strangers bypass security is generally frowned upon.
Source: cisco.com
The Full Story
Another day, another massive hole in the wall we call a security perimeter, this time courtesy of Cisco's creative interpretation of SSO certificate validation. With a CVSS score of 9.8, remote attackers are likely queuing up to bypass Control Hub while we wonder why we even bother with passwords. Those relying on Webex for private communications are the primary victims of this latest exercise in digital negligence. Shielding ourselves from this catastrophe involves following Cisco's advice to address the flaw. We can only hope the next update prioritizes basic authentication checks.