CVE-2020-26082

CVE-2020-26082 describes a medium-severity vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) models C170, C190, C380, C390, C680, C690, and C690X. This flaw, due to improper handling of password-protected zip files, allows an unauthenticated, remote attacker to bypass configured content filters. By sending a crafted, malicious zip file, an attacker can circumvent email security measures, potentially delivering harmful content. While the CVSS score is 5.3 (MEDIUM) with low impact on integrity and no impact on confidentiality or availability, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion.