Skip to content
fr Sign in
6.0 Medium

CVE-2026-20246 A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to…

Description

A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.

Affected products and versions

Product Affected versions Fixed in
Cisco Umbrella Insights Virtual Appliance 3.8.3 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.7 3.7 → 3.7.1 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.6 3.6.1 → 3.6.2 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.5 3.5 → 3.5.2 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.4 3.4 → 3.4.6 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.3 3.3 → 3.3.4 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.2 3.2 → 3.2.3 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.1 3.1 → 3.1.4 No fix stated
Cisco Umbrella Insights Virtual Appliance 3.0 3.0 → 3.0.5 No fix stated
Show the 10 other branches
Product Affected versions Fixed in
Cisco Umbrella Insights Virtual Appliance 2.8 2.8 → 2.8.9 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.7 2.7 → 2.7.10 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.6 2.6.0 → 2.6.2 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.5 2.5 → 2.5.7 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.4 2.4 → 2.4.12 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.3 2.3 → 2.3.1 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.2 2.2 → 2.2.1 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.1 2.1.0 → 2.1.5 No fix stated
Cisco Umbrella Insights Virtual Appliance 2.0 2.0.0 → 2.0.3 No fix stated
Cisco Umbrella Insights Virtual Appliance 1.5 1.5.4 → 1.5.6 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Umbrella Insights Virtual Appliance

The 12 CVEs of Cisco Umbrella Insights Virtual Appliance →
CVE-2026-20221 Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel… 5.8 Medium CVE-2023-20246 Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an… 5.8 Medium CVE-2023-20071 Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an… 5.8 Medium CVE-2022-20922 Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on… 5.8 Medium
Track this CVE