CVE-2026-20350
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance is due to improper validation of user-supplied input. An authenticated remote attacker can save configuration details containing malicious values, allowing injection and execution of arbitrary operating system commands with root privileges.
Risk Assessment
An attacker with valid administrative credentials can fully compromise the device by executing commands as root. This poses a critical risk to confidentiality, integrity, and availability of the system.
Recommendation
Apply the Cisco-provided fix as soon as possible and restrict access to the management interface to trusted networks and administrative accounts.
Other vulnerabilities in Cisco ThousandEyes Virtual Appliance
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by saving configuration details that contain malicious values. A successful exploit could allow the attacker to execute arbitrary operating system commands with root privileges. To exploit this vulnerability, the attacker must have valid administrative credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS