CVE-2026-20040

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-20040
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root and execute arbitrary commands on the underlying operating system.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
History

01 Jul 2026, 16:24

Type Values Removed Values Added
First Time Cisco ios Xr
Cisco
CPE cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
References () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W - () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W - Vendor Advisory

17 Jun 2026, 10:16

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en la CLI de Cisco IOS XR Software podría permitir a un atacante autenticado y local ejecutar comandos arbitrarios como root en el sistema operativo subyacente de un dispositivo afectado. Esta vulnerabilidad se debe a una validación insuficiente de los argumentos de usuario que se pasan a comandos específicos de la CLI. Un atacante con una cuenta de bajo privilegio podría explotar esta vulnerabilidad utilizando comandos manipulados en el indicador. Un exploit exitoso podría permitir al atacante elevar los privilegios a root y ejecutar comandos arbitrarios en el sistema operativo subyacente.

11 Mar 2026, 17:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-11 17:16

Updated : 2026-07-01 16:24

NVD link : CVE-2026-20040

Mitre link : CVE-2026-20040

CVE.ORG link : CVE-2026-20040

JSON object : View

Products Affected

cisco

  • ios_xr
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')