Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-20350

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

CVSS 3.1 4.7 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-20350

Published

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by saving configuration details that contain malicious values. A successful exploit could allow the attacker to execute arbitrary operating system commands with root privileges. To exploit this vulnerability, the attacker must have valid administrative credentials.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-20350

Published

Cisco ThousandEyes Enterprise Agent

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Cisco",
                    "product": "Cisco ThousandEyes Enterprise Agent",
                    "versions": [
                        {
                            "version": "Agent 5.0",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 4.4.4",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 4.4.3",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 4.4.2",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 4.2",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 4.1",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 4.0",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 5.1",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 5.1.2",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 5.1.3",
                            "status": "affected"
                        },
                        {
                            "version": "Agent 5.2.0",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON