CVE-2026-20246
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
Severity
Medium 6
CVSS 3.1
Exploited
Not listed
EPSS
0.001
1.2th percentile
Discovered by
Third party
Published by the vendor
Published
Jun 17, 2026
Assigned by cisco
Description
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.
Weakness: CWE-269
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Umbrella | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (1)
- Cisco · Cisco Umbrella Insights Virtual Appliance