CVE WatchJul 1, 2026

CVE-2026-20046

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to

CVSS

8.8

High

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Mar 11, 2026 · Last modified: Jul 1, 2026 · CWE-264

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-08-042026-08-31

Technical description

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker with a low-privileged account could exploit this vulnerability by using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on an affected device without authorization checks.

Official references

sec.cloudapps.cisco.comhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-493085.5 MED

0.4%

——0Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.7d CVE-2026-493046.2 MED

0.2%

——0Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.7d CVE-2026-493035.1 MED

0.2%

——0Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.4d CVE-2026-185935.6 MED

18.2%

——5A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotely. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.20d CVE-2026-585565.1 MED

1.6%

——0Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.49d CVE-2026-585556.6 MED

1.7%

——1Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.49d