CVE-2026-20246

6.0 Moyenne

Publiée le 17/06/2026 à 19:16 · Modifiée le 22/06/2026 à 15:24 · Analysée par le NVD · Source : psirt@cisco.com

Description

A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.

Traduire en français

Produits concernés

Cisco Umbrella Insights Virtual Appliance
Cisco umbrella virtual appliance

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.0 Moyenne	psirt@cisco.com	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N`

Faiblesses (CWE)

CWE-269

Références

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-priv-esc-F4wJB7AU Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories