CVE-2026-20350

A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by saving configuration details that contain malicious values. A successful exploit could allow the attacker to execute arbitrary operating system commands with root privileges. To exploit this vulnerability, the attacker must have valid administrative credentials.

• CWE-78

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-teva-os-command-W4GAO6jp

Published

Sep 16, 2026

Last Modified

Sep 18, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20345A vulnerability in the GPT file format parser of ClamAV coul…7.5
• CVE-2026-20346A vulnerability in the PDF file format parser of ClamAV coul…7.5
• CVE-2026-20347A vulnerability in the Mach-O file format parser of ClamAV c…7.5
• CVE-2026-20348A vulnerability in the XAR file format parser of ClamAV coul…7.5
• CVE-2026-20349A vulnerability in the Remote Access SSL VPN service for Cis…8.6
• CVE-2026-2035Deciso OPNsense diag_backup.php filename Command Injection R…6.8
• CVE-2026-20352A vulnerability in the RADIUS feature of Cisco Identity Serv…8.6
• CVE-2026-20353As part of Cisco's ongoing commitment to proactive security …9.8
• CVE-2026-20354Multiple vulnerabilities in the Secure/Multipurpose Internet…5.9
• CVE-2026-20355Multiple vulnerabilities in the Secure/Multipurpose Internet…5.9
• CVE-2026-20357As part of Cisco's ongoing commitment to proactive security …10
• CVE-2026-20358As part of Cisco's ongoing commitment to proactive security …10