CVE-2026-20206

A vulnerability in the BrowserBot component of Cisco ThousandEyes Enterprise Agent could have allowed an authenticated, remote attacker to execute arbitrary commands on Agents on behalf of the BrowserBot synthetics orchestration process. Cisco has addressed this vulnerability in the Cisco ThousandEyes Enterprise Agent, and no customer action is needed. This vulnerability was due to insufficient input validation of command arguments that are supplied by the user. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by authenticating to the ThousandEyes SaaS and submitting crafted input into the affected parameter. A successful exploit could have allowed the attacker to execute arbitrary commands within the BrowserBot container as the node user. To exploit this vulnerability, the attacker must have valid user credentials for the ThousandEyes SaaS and the ability to manage transaction tests.

• CWE-78

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tebbot-cmdinj-wN3yQ5gn

Published

May 20, 2026

Last Modified

Jul 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2020The JS Archive List plugin for WordPress is vulnerable to PH…7.5
• CVE-2026-20200A vulnerability in the web-based management interface of Cis…8.8
• CVE-2026-20202In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, …6.6
• CVE-2026-20203In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, …4.3
• CVE-2026-20204In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, …7.1
• CVE-2026-20205In Splunk MCP Server app versions below 1.0.3 , a user who h…7.2
• CVE-2026-20209A vulnerability in the web UI of Cisco Catalyst SD-WAN Manag…5.4
• CVE-2026-2021The Slideshow Gallery LITE plugin for WordPress is vulnerabl…6.4
• CVE-2026-20210A vulnerability in the web UI of Cisco Catalyst SD-WAN Manag…5.4
• CVE-2026-20213A vulnerability in the PE file format parser of ClamAV could…7.5
• CVE-2026-20214A vulnerability in the FSG file format parser of ClamAV coul…7.5
• CVE-2026-20215A vulnerability in the 7z file format parser of ClamAV could…7.5