Privilege Escalation Vulnerability in Cisco Umbrella Virtual Appliance
CVE-2026-20246

6MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Umbrella Insights Virtual Appliance
Vendor
CVE Published:
17 June 2026

Badges

👾 Exploit Exists

What is CVE-2026-20246?

A vulnerability exists in the vmadmin CLI of Cisco Umbrella Virtual Appliance, which could allow an authenticated local attacker to elevate their privileges on the device. The issue stems from insufficient validation of user-supplied commands. An attacker possessing vmadmin privileges can exploit this flaw by executing specific commands at the command-line interface (CLI), which could lead to unauthorized root access.

Affected Version(s)

Cisco Umbrella Insights Virtual Appliance 2.6.0

Cisco Umbrella Insights Virtual Appliance 2.5.6

Cisco Umbrella Insights Virtual Appliance 2.5

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.