Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-20046

34
FAUCET Score

CVE-2026-20046 identifies a high-severity privilege escalation vulnerability in Cisco IOS XR Software, caused by incorrect task group assignment for a specific CLI command. An authenticated, low-privileged local attacker can exploit this flaw to bypass authorization checks and gain full administrative control of an affected device. This vulnerability carries a CVSS score of 8.8 (High), indicating significant potential impact. Currently, there is no evidence of active exploitation, public exploit code availability, or significant community attention.

Impacted Technologies

VendorProductVersion(s)CPE
< 25.2.2CPE matchmatch criteria
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.0
Impact Score
6.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.14%
Probability of exploitation in next 30 days
EPSS Percentile
3.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0014 is in the 16th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

jenkinspatch availablevia llm_extracted
Fixed in: 1.0
View patch
opentsdbpatch availablevia llm_extracted
Fixed in: 1.0
View patch
wiresharkpatch availablevia llm_extracted
Fixed in: 1.0
View patch
ciscoworkaround availablevia nvd_reference
View patch
h2oworkaround availablevia llm_extracted
jellyfinworkaround availablevia llm_extracted
View patch

Vendor Advisories (5)

jenkinsllm-jenkins-64987faae34c550bHIGH

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

Mar 11, 2026
opentsdbllm-opentsdb-0d72321ea463bc3bHIGH

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

Mar 11, 2026
wiresharkllm-wireshark-4a66f0f00f4ba7f3HIGH

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

Mar 11, 2026
h2ollm-h2o-9c1d8fcc707f4454HIGH

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

Mar 11, 2026
jellyfinllm-jellyfin-7b490cf2741ed38aHIGH

Cisco IOS XR Software CLI Privilege Escalation Vulnerabilities

Mar 11, 2026

References

sec.cloudapps.cisco.com / security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W
MitigationVendor Advisory