CVE-2026-20199

A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underlying operating system as the root user. This vulnerability is due to insufficient validation of user-supplied input. An authenticated attacker could exploit this vulnerability by uploading a crafted certificate to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit this vulnerability, the attacker must have valid administrative credentials.

• CWE-74

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tevacert-rce-RMJVEym5Vendor Advisory

Published

May 20, 2026

Last Modified

Jul 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2019The Cart All In One For WooCommerce plugin for WordPress is …7.2
• CVE-2026-20190A vulnerability in Cisco ISE and ISE-PIC could allow an unau…7.5
• CVE-2026-20191A vulnerability in Cisco Catalyst Center could allow an unau…7.5
• CVE-2026-20193A vulnerability in the RADIUS Policy API endpoints of Cisco …4.3
• CVE-2026-20195A vulnerability in an identity management API endpoint of Ci…5.3
• CVE-2026-20198A vulnerability in the web-based management interface of Cis…4.8
• CVE-2026-2020The JS Archive List plugin for WordPress is vulnerable to PH…7.5
• CVE-2026-20200A vulnerability in the web-based management interface of Cis…8.8
• CVE-2026-20202In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, …6.6
• CVE-2026-20203In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, …4.3
• CVE-2026-20204In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, …7.1
• CVE-2026-20205In Splunk MCP Server app versions below 1.0.3 , a user who h…7.2