CVE-2026-20246— Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
Possible ATT&CK Techniques 1AI
T1548.002 · Bypass User Account ControlAffected Version Matrix 73
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Umbrella Insights Virtual Appliance | 2.6.0 | affected |
2.5.6 | affected | ||
2.5 | affected | ||
2.4.12 | affected | ||
2.7 | affected | ||
2.6.2 | affected | ||
2.5.5 | affected | ||
2.5.4 | affected | ||
| … +65 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-20246
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
特权管理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Umbrella Insights Virtual Appliance 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco umbrella insights virtual appliance是美国Cisco公司的一款安全分析虚拟设备。 Cisco Umbrella Insights Virtual Appliance存在安全漏洞，该漏洞源于对用户提供的命令验证不足，可能导致已验证的本地攻击者提升权限。以下版本受到影响：1.5.4版本、1.5.5版本、1.5.6版本、2.0.0版本、2.0.2版本、2.0.3版本、2.1.0版本、2.1.2版本、2.1.4版本、2.1.5版本、2.2版本、2.2.1版本、2.3版
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Umbrella Insights Virtual Appliance | 2.6.0 | - |
II. Public POCs for CVE-2026-20246
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20246
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20246 (1)
Same Patch Batch · Cisco · 2026-06-17 · 5 CVEs total
| CVE-2026-20181 | 9.1 CRITICAL | Cisco Identity Services Engine Remote Code Execution Vulnerability |
| CVE-2026-20190 | 7.5 HIGH | Cisco Identity Services Engine Information Disclosure Vulnerability |
| CVE-2026-20220 | 6.3 MEDIUM | Cisco Crosswork Network Controller Remote Code Execution Vulnerability |
| CVE-2026-20178 | 4.3 MEDIUM | Cisco Webex App URL参数验证缺陷致重定向 |
IV. Related Vulnerabilities
Same product: Cisco Umbrella Insights Virtual Appliance
- CVE-2022-20773
Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnera - CVE-2022-20805
Cisco Umbrella Secure Web Gateway File Decryption Bypass Vul - CVE-2022-20738
Cisco Umbrella Secure Web Gateway File Inspection Bypass Vul - CVE-2021-40126
Cisco Umbrella Email Enumeration Vulnerability - CVE-2021-1475
Cisco Umbrella Link and CSV Formula Injection Vulnerabilitie
Same vendor: Cisco
- CVE-2026-20243
ClamAV ALZ Archive Processing Denial of Service Vulnerabilit - CVE-2026-20244
ClamAV DMG File Processing Denial of Service Vulnerability - CVE-2026-20215
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corr - CVE-2026-20217
ClamAV PESpin File Format Processing Out-of-Bounds Memory Co - CVE-2026-20216
ClamAV InstallShield File Format Processing Resource Exhaust
Same weakness: CWE-269
- CVE-2026-46680
containerd user ID handling bypass allows runAsNonRoot evasi - CVE-2026-13228
LatePoint <= 5.6.3 - Authenticated (Custom+) Privilege Escal - CVE-2026-12224
Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escal - CVE-2026-57995
phpMyFAQ - Privilege Escalation via Missing Self-Rights Cons - CVE-2026-58054
MyBB - Privilege Escalation from Limited ACP User Management
V. Comments for CVE-2026-20246
No comments yet