Report feedback

An authenticated local attacker with limited (read-only) administrator privileges can elevate their privileges up to root level by making unauthorized modifications to system files in the service shell maintenance interface of Cisco Intersight Virtual Appliance. While a manual upgrade is required for Intersight PVA, the cloud-based Intersight CVA will be updated automatically [1].

The vulnerability is present in product:

• Cisco Intersight Virtual Appliance Software; >=1.1.4, <1.1.4-1;

CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

More information:

• CVE-2026-20092 at cve.org, NVD
• CWE-732: Incorrect Permission Assignment for Critical Resource at cwe.mitre.org

The vulnerability was publicly disclosed 21. 1. 2026.

An unauthenticated remote attacker can perform a DoS attack on the SSH port in Cisco IEC6400 Wireless Backhaul Edge Compute Software. Other operations remain unaffected during the attack [2].

The vulnerability is present in product:

• Cisco IEC6400 Wireless Backhaul Edge Compute Software; <=1.1.0; >=1.1.0, <1.2.0;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

More information:

• CVE-2026-20080 at cve.org, NVD
• CWE-400: Uncontrolled Resource Consumption at cwe.mitre.org

The vulnerability was publicly disclosed 21. 1. 2026.

An authenticated remote attacker with an administrator account can perform an XSS attack in the web-based management interface of Cisco Packaged and Unified CCE [3].

The vulnerability is present in products:

• Cisco Packaged Contact Center Enterprise; <=12.6; >=12.6, <15.0(1)ES202511;
• Cisco Unified Contact Center Enterprise; <=12.6; >=12.6, <15.0(1)ES202511;

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

More information:

• CVE-2026-20055 at cve.org, NVD
• CVE-2026-20109 at cve.org, NVD
• CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') at cwe.mitre.org

The vulnerability was publicly disclosed 21. 1. 2026.