CVE-2026-20350

Name of the Vulnerable Software and Affected Versions Cisco ThousandEyes Virtual Appliance (affected versions not specified)

Description An issue in the web-based management interface allows an authenticated remote attacker to perform operating system command injection. This occurs because the interface does not properly validate user-supplied input. An attacker with administrative credentials can exploit this by saving configuration details containing malicious values, potentially executing arbitrary commands with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.