CVE-2026-20161
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-04-15
Modified: 2026-10-25
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
High
A:
None
Description
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are on the local file system of an affected device. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system. A successful exploit could allow the attacker to bypass file system permissions and overwrite arbitrary files on the affected device.