CVE-2026-20199
CVE-2026-20199: 1 tracked advisory record across Cisco. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityMedium4.7
Medium [CVE-2026-20199] Cisco ThousandEyes Virtual Appliance Authenticated Remote Code Execution Vulnerability
cisco-sa-tevacert-rce-RMJVEym5Source published Source updated
A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insufficient validation of user-supplied input. An authenticated attacker could exploit this vulnerability by uploading a crafted certificate to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit this vulnerability, the attacker must have valid administrative credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
- Related products — impact not confirmed
- ThousandEyes Enterprise Agent
- Source-reported affected versions
- Scope: At the time of publication, this vulnerability affected Cisco ThousandEyes Virtual Appliance, regardless of device configuration.
- Release Earlier than 0.262 (first fixed: 0.262.0)
- Source-reported fixed versions
- 0.262.0
- Mitigation guidance
- Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
- Earlier than 0.262: upgrade to 0.262.0.
- Workarounds
- There are no workarounds that address this vulnerability.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.