CVE-2026-20246
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.
Severity
MEDIUM
CVSS score
6.0
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-06-17 17:16:43.423000
Last modified
2026-10-26 11:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-20246",
"sourceIdentifier": "[email protected]",
"published": "2026-06-17T17:16:43.423",
"lastModified": "2026-10-26T11:10:00.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la CLI vmadmin de Cisco Umbrella Virtual Appliance podría permitir a un atacante local autenticado elevar privilegios en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a una validación insuficiente de los comandos proporcionados por el usuario. Un atacante con privilegios vmadmin podría explotar esta vulnerabilidad utilizando ciertos comandos en la CLI. Un exploit exitoso podría permitir al atacante elevar privilegios a root."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Umbrella Insights Virtual Appliance",
"defaultStatus": "unknown",
"versions": [
{
"version": "2.6.0",
"status": "affected"
},
{
"version": "2.5.6",
"status": "affected"
},
{
"version": "2.5",
"status": "affected"
},
{
"version": "2.4.12",
"status": "affected"
},
{
"version": "2.7",
"status": "affected"
},
{
"version": "2.6.2",
"status": "affected"
},
{
"version": "2.5.5",
"status": "affected"
},
{
"version": "2.5.4",
"status": "affected"
},
{
"version": "2.8",
"status": "affected"
},
{
"version": "2.6.1",
"status": "affected"
},
{
"version": "2.5.7",
"status": "affected"
},
{
"version": "1.5.4",
"status": "affected"
},
{
"version": "1.5.5",
"status": "affected"
},
{
"version": "1.5.6",
"status": "affected"
},
{
"version": "2.0.0",
"status": "affected"
},
{
"version": "2.0.2",
"status": "affected"
},
{
"version": "2.0.3",
"status": "affected"
},
{
"version": "2.1.0",
"status": "affected"
},
{
"version": "2.1.2",
"status": "affected"
},
{
"version": "2.1.4",
"status": "affected"
},
{
"version": "2.1.5",
"status": "affected"
},
{
"version": "2.2",
"status": "affected"
},
{
"version": "2.2.1",
"status": "affected"
},
{
"version": "2.3",
"status": "affected"
},
{
"version": "2.3.1",
"status": "affected"
},
{
"version": "2.4",
"status": "affected"
},
{
"version": "2.4.4",
"status": "affected"
},
{
"version": "2.4.6",
"status": "affected"
},
{
"version": "2.8.9",
"status": "affected"
},
{
"version": "3.0",
"status": "affected"
},
{
"version": "3.1",
"status": "affected"
},
{
"version": "3.2",
"status": "affected"
},
{
"version": "2.8.1",
"status": "affected"
},
{
"version": "2.8.2",
"status": "affected"
},
{
"version": "2.8.3",
"status": "affected"
},
{
"version": "2.8.4",
"status": "affected"
},
{
"version": "2.8.5",
"status": "affected"
},
{
"version": "3.0.1",
"status": "affected"
},
{
"version": "3.0.2",
"status": "affected"
},
{
"version": "3.0.4",
"status": "affected"
},
{
"version": "3.0.5",
"status": "affected"
},
{
"version": "3.1.1",
"status": "affected"
},
{
"version": "3.1.2",
"status": "affected"
},
{
"version": "3.1.3",
"status": "affected"
},
{
"version": "3.1.4",
"status": "affected"
},
{
"version": "3.2.1",
"status": "affected"
},
{
"version": "3.2.2",
"status": "affected"
},
{
"version": "3.2.3",
"status": "affected"
},
{
"version": "3.3",
"status": "affected"
},
{
"version": "3.3.1",
"status": "affected"
},
{
"version": "3.3.2",
"status": "affected"
},
{
"version": "3.3.3",
"status": "affected"
},
{
"version": "3.3.4",
"status": "affected"
},
{
"version": "3.4",
"status": "affected"
},
{
"version": "3.4.1",
"status": "affected"
},
{
"version": "3.4.2",
"status": "affected"
},
{
"version": "3.4.3",
"status": "affected"
},
{
"version": "3.4.4",
"status": "affected"
},
{
"version": "3.4.5",
"status": "affected"
},
{
"version": "3.4.6",
"status": "affected"
},
{
"version": "3.5",
"status": "affected"
},
{
"version": "2.7.1",
"status": "affected"
},
{
"version": "2.7.2",
"status": "affected"
},
{
"version": "2.7.6",
"status": "affected"
},
{
"version": "2.7.9",
"status": "affected"
},
{
"version": "2.7.10",
"status": "affected"
},
{
"version": "3.5.1",
"status": "affected"
},
{
"version": "3.5.2",
"status": "affected"
},
{
"version": "3.6.1",
"status": "affected"
},
{
"version": "3.6.2",
"status": "affected"
},
{
"version": "3.7",
"status": "affected"
},
{
"version": "3.7.1",
"status": "affected"
},
{
"version": "3.8.3",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.8,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-06-17T17:15:44.900787Z",
"id": "CVE-2026-20246",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:umbrella_virtual_appliance:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.8.5",
"matchCriteriaId": "747DFEB4-0F17-4600-8E22-ECB545A12EE8"
}
]
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-priv-esc-F4wJB7AU",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}