CVE-2019-1636: Cisco Webex Teams URI Handler Insecure Library Loading Vulnerability

Security readout for executives and security teams

A malicious link could trick the Windows Cisco Webex Teams client into loading attacker-controlled code from the wrong folder. If successful, the attacker could run commands as the targeted user. The issue is high severity, but it requires user interaction and an attacker-controlled library in an accessible location. Exposure is most likely on Windows endpoints with Cisco Webex Teams or legacy Cisco Spark installed where the application URI handler is registered. Risk increases for users who receive untrusted links and can access attacker-controlled or shared directories containing crafted libraries. Treat this as a high-priority endpoint remediation item for organizations using Webex Teams on Windows. It is not presented as actively exploited in the supplied evidence, but successful exploitation could give an attacker user-level command execution through normal link-click behavior. Mitigation focus: Check Cisco’s advisory for affected and fixed Webex Teams client versions.; Inventory Windows endpoints running Cisco Webex Teams or Cisco Spark.; Prioritize upgrading or removing vulnerable clients according to Cisco guidance..

Prepared

May 24, 2026, 01:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.