CVE-2026-20114
CVE-2026-20114: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityMedium5.4
Medium [CVE-2026-20114] Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability
cisco-sa-iosxe-lobby-privesc-KwxBqJySource published Source updated
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because parameters that are received by an API endpoint are not sufficiently validated. An attacker could exploit this vulnerability by authenticating as a Lobby Ambassador user and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to create a new user with privile…
- Related products — impact not confirmed
- Cisco IOS XE Software 16.11.1a
- Cisco IOS XE Software 16.11.1b
- Cisco IOS XE Software 16.11.2
- Cisco IOS XE Software 16.11.1s
2 more entries in the full advisory.
- Source-reported affected versions
- Scope: At the time of publication, this vulnerability affected Cisco devices if they were running a vulnerable release of Cisco IOS XE Software and had Lobby Ambassadors configured.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
- Workarounds
- There are no workarounds that address this vulnerability.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.