Privilege Escalation Vulnerability in Cisco Intersight Virtual Appliance

CVE-2026-20092

What is CVE-2026-20092?

A vulnerability exists within the read-only maintenance shell of the Cisco Intersight Virtual Appliance, allowing an authenticated local attacker with administrative privileges to elevate their rights to root. This serious security flaw stems from improper file permissions on essential configuration files for system accounts in the maintenance shell. By accessing the shell as a read-only administrator, an attacker can manipulate these system files to grant themselves root privileges, enabling them to take complete control over the virtual appliance. This could lead to unauthorized access to sensitive information, modifications to workloads and configurations, and potential denial of service (DoS).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References