CVE-2021-40128

CVE-2021-40128 is a medium-severity vulnerability in Cisco Webex Meetings that allows an unauthenticated, remote attacker to manipulate account activation emails. By exploiting insufficient validation of user-supplied parameters, an attacker can send a crafted HTTP request to embed an arbitrary domain into the activation link. This could redirect users to an attacker-controlled website, potentially for phishing or other malicious purposes. The vulnerability has a CVSS score of 5.3 and is not known to be actively exploited, nor is there publicly available exploit code or significant community discussion.