cveboard RSS feed

CVE-2026-20114

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because parameters that are received by an API endpoint are not sufficiently validated. An attacker could exploit this vulnerability by authenticating as a Lobby Ambassador user and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to create a new user with privilege level 1 access to the web-based management API. The attacker would then be able to access the device with these new credentials and privileges.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IOS XE Software

Vendor
Cisco
Product
Cisco IOS XE Software
Platforms
Unknown
Default status
Unknown
Cisco IOS XE Software · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
16.11.1affectedUnavailableUnavailableUnavailableNone listed
16.11.1aaffectedUnavailableUnavailableUnavailableNone listed
16.11.1baffectedUnavailableUnavailableUnavailableNone listed
16.11.2affectedUnavailableUnavailableUnavailableNone listed
16.11.1saffectedUnavailableUnavailableUnavailableNone listed
16.12.1affectedUnavailableUnavailableUnavailableNone listed
16.12.1saffectedUnavailableUnavailableUnavailableNone listed
16.12.1aaffectedUnavailableUnavailableUnavailableNone listed
16.12.1caffectedUnavailableUnavailableUnavailableNone listed
16.12.1waffectedUnavailableUnavailableUnavailableNone listed
16.12.2affectedUnavailableUnavailableUnavailableNone listed
16.12.1yaffectedUnavailableUnavailableUnavailableNone listed
16.12.2aaffectedUnavailableUnavailableUnavailableNone listed
16.12.3affectedUnavailableUnavailableUnavailableNone listed
16.12.8affectedUnavailableUnavailableUnavailableNone listed
16.12.2saffectedUnavailableUnavailableUnavailableNone listed
16.12.1xaffectedUnavailableUnavailableUnavailableNone listed
16.12.1taffectedUnavailableUnavailableUnavailableNone listed
16.12.4affectedUnavailableUnavailableUnavailableNone listed
16.12.3saffectedUnavailableUnavailableUnavailableNone listed
16.12.3aaffectedUnavailableUnavailableUnavailableNone listed
16.12.4aaffectedUnavailableUnavailableUnavailableNone listed
16.12.5affectedUnavailableUnavailableUnavailableNone listed
16.12.6affectedUnavailableUnavailableUnavailableNone listed
16.12.1z1affectedUnavailableUnavailableUnavailableNone listed
16.12.5aaffectedUnavailableUnavailableUnavailableNone listed
16.12.5baffectedUnavailableUnavailableUnavailableNone listed
16.12.1z2affectedUnavailableUnavailableUnavailableNone listed
16.12.6aaffectedUnavailableUnavailableUnavailableNone listed
16.12.7affectedUnavailableUnavailableUnavailableNone listed
16.12.9affectedUnavailableUnavailableUnavailableNone listed
16.12.10affectedUnavailableUnavailableUnavailableNone listed
16.12.10aaffectedUnavailableUnavailableUnavailableNone listed
16.12.11affectedUnavailableUnavailableUnavailableNone listed
16.12.12affectedUnavailableUnavailableUnavailableNone listed
16.12.13affectedUnavailableUnavailableUnavailableNone listed
16.12.14affectedUnavailableUnavailableUnavailableNone listed
17.1.1affectedUnavailableUnavailableUnavailableNone listed
17.1.1aaffectedUnavailableUnavailableUnavailableNone listed
17.1.1saffectedUnavailableUnavailableUnavailableNone listed
17.1.1taffectedUnavailableUnavailableUnavailableNone listed
17.1.3affectedUnavailableUnavailableUnavailableNone listed
17.2.1affectedUnavailableUnavailableUnavailableNone listed
17.2.1raffectedUnavailableUnavailableUnavailableNone listed
17.2.1aaffectedUnavailableUnavailableUnavailableNone listed
17.2.1vaffectedUnavailableUnavailableUnavailableNone listed
17.2.2affectedUnavailableUnavailableUnavailableNone listed
17.2.3affectedUnavailableUnavailableUnavailableNone listed
17.3.1affectedUnavailableUnavailableUnavailableNone listed
17.3.2affectedUnavailableUnavailableUnavailableNone listed
17.3.3affectedUnavailableUnavailableUnavailableNone listed
17.3.1aaffectedUnavailableUnavailableUnavailableNone listed
17.3.1waffectedUnavailableUnavailableUnavailableNone listed
17.3.2aaffectedUnavailableUnavailableUnavailableNone listed
17.3.1xaffectedUnavailableUnavailableUnavailableNone listed
17.3.1zaffectedUnavailableUnavailableUnavailableNone listed
17.3.4affectedUnavailableUnavailableUnavailableNone listed
17.3.5affectedUnavailableUnavailableUnavailableNone listed
17.3.4aaffectedUnavailableUnavailableUnavailableNone listed
17.3.6affectedUnavailableUnavailableUnavailableNone listed
17.3.4baffectedUnavailableUnavailableUnavailableNone listed
17.3.4caffectedUnavailableUnavailableUnavailableNone listed
17.3.5aaffectedUnavailableUnavailableUnavailableNone listed
17.3.5baffectedUnavailableUnavailableUnavailableNone listed
17.3.7affectedUnavailableUnavailableUnavailableNone listed
17.3.8affectedUnavailableUnavailableUnavailableNone listed
17.3.8aaffectedUnavailableUnavailableUnavailableNone listed
17.4.1affectedUnavailableUnavailableUnavailableNone listed
17.4.2affectedUnavailableUnavailableUnavailableNone listed
17.4.1aaffectedUnavailableUnavailableUnavailableNone listed
17.4.1baffectedUnavailableUnavailableUnavailableNone listed
17.4.2aaffectedUnavailableUnavailableUnavailableNone listed
17.5.1affectedUnavailableUnavailableUnavailableNone listed
17.5.1aaffectedUnavailableUnavailableUnavailableNone listed
17.6.1affectedUnavailableUnavailableUnavailableNone listed
17.6.2affectedUnavailableUnavailableUnavailableNone listed
17.6.1waffectedUnavailableUnavailableUnavailableNone listed
17.6.1aaffectedUnavailableUnavailableUnavailableNone listed
17.6.1xaffectedUnavailableUnavailableUnavailableNone listed
17.6.3affectedUnavailableUnavailableUnavailableNone listed
17.6.1yaffectedUnavailableUnavailableUnavailableNone listed
17.6.1zaffectedUnavailableUnavailableUnavailableNone listed
17.6.3aaffectedUnavailableUnavailableUnavailableNone listed
17.6.4affectedUnavailableUnavailableUnavailableNone listed
17.6.1z1affectedUnavailableUnavailableUnavailableNone listed
17.6.5affectedUnavailableUnavailableUnavailableNone listed
17.6.6affectedUnavailableUnavailableUnavailableNone listed
17.6.6aaffectedUnavailableUnavailableUnavailableNone listed
17.6.5aaffectedUnavailableUnavailableUnavailableNone listed
17.6.7affectedUnavailableUnavailableUnavailableNone listed
17.6.8affectedUnavailableUnavailableUnavailableNone listed
17.6.8aaffectedUnavailableUnavailableUnavailableNone listed
17.7.1affectedUnavailableUnavailableUnavailableNone listed
17.7.1aaffectedUnavailableUnavailableUnavailableNone listed
17.7.1baffectedUnavailableUnavailableUnavailableNone listed
17.7.2affectedUnavailableUnavailableUnavailableNone listed
17.10.1affectedUnavailableUnavailableUnavailableNone listed
17.10.1aaffectedUnavailableUnavailableUnavailableNone listed
17.10.1baffectedUnavailableUnavailableUnavailableNone listed
17.8.1affectedUnavailableUnavailableUnavailableNone listed
17.8.1aaffectedUnavailableUnavailableUnavailableNone listed
17.9.1affectedUnavailableUnavailableUnavailableNone listed
17.9.1waffectedUnavailableUnavailableUnavailableNone listed
17.9.2affectedUnavailableUnavailableUnavailableNone listed
17.9.1aaffectedUnavailableUnavailableUnavailableNone listed
17.9.1xaffectedUnavailableUnavailableUnavailableNone listed
17.9.1yaffectedUnavailableUnavailableUnavailableNone listed
17.9.3affectedUnavailableUnavailableUnavailableNone listed
17.9.2aaffectedUnavailableUnavailableUnavailableNone listed
17.9.1x1affectedUnavailableUnavailableUnavailableNone listed
17.9.3aaffectedUnavailableUnavailableUnavailableNone listed
17.9.4affectedUnavailableUnavailableUnavailableNone listed
17.9.1y1affectedUnavailableUnavailableUnavailableNone listed
17.9.5affectedUnavailableUnavailableUnavailableNone listed
17.9.4aaffectedUnavailableUnavailableUnavailableNone listed
17.9.5aaffectedUnavailableUnavailableUnavailableNone listed
17.9.5baffectedUnavailableUnavailableUnavailableNone listed
17.9.6affectedUnavailableUnavailableUnavailableNone listed
17.9.6aaffectedUnavailableUnavailableUnavailableNone listed
17.9.7affectedUnavailableUnavailableUnavailableNone listed
17.9.5eaffectedUnavailableUnavailableUnavailableNone listed
17.9.5faffectedUnavailableUnavailableUnavailableNone listed
17.9.8affectedUnavailableUnavailableUnavailableNone listed
17.9.7aaffectedUnavailableUnavailableUnavailableNone listed
17.9.7baffectedUnavailableUnavailableUnavailableNone listed
17.11.1affectedUnavailableUnavailableUnavailableNone listed
17.11.1aaffectedUnavailableUnavailableUnavailableNone listed
17.12.1affectedUnavailableUnavailableUnavailableNone listed
17.12.1waffectedUnavailableUnavailableUnavailableNone listed
17.12.1aaffectedUnavailableUnavailableUnavailableNone listed
17.12.1xaffectedUnavailableUnavailableUnavailableNone listed
17.12.2affectedUnavailableUnavailableUnavailableNone listed
17.12.3affectedUnavailableUnavailableUnavailableNone listed
17.12.2aaffectedUnavailableUnavailableUnavailableNone listed
17.12.1yaffectedUnavailableUnavailableUnavailableNone listed
17.12.1zaffectedUnavailableUnavailableUnavailableNone listed
17.12.4affectedUnavailableUnavailableUnavailableNone listed
17.12.3aaffectedUnavailableUnavailableUnavailableNone listed
17.12.1z1affectedUnavailableUnavailableUnavailableNone listed
17.12.1z2affectedUnavailableUnavailableUnavailableNone listed
17.12.4aaffectedUnavailableUnavailableUnavailableNone listed
17.12.5affectedUnavailableUnavailableUnavailableNone listed
17.12.4baffectedUnavailableUnavailableUnavailableNone listed
17.12.1z3affectedUnavailableUnavailableUnavailableNone listed
17.12.5aaffectedUnavailableUnavailableUnavailableNone listed
17.12.1z4affectedUnavailableUnavailableUnavailableNone listed
17.12.5baffectedUnavailableUnavailableUnavailableNone listed
17.12.5caffectedUnavailableUnavailableUnavailableNone listed
17.12.5daffectedUnavailableUnavailableUnavailableNone listed
17.13.1affectedUnavailableUnavailableUnavailableNone listed
17.13.1aaffectedUnavailableUnavailableUnavailableNone listed
17.14.1affectedUnavailableUnavailableUnavailableNone listed
17.14.1aaffectedUnavailableUnavailableUnavailableNone listed
17.15.1affectedUnavailableUnavailableUnavailableNone listed
17.15.1waffectedUnavailableUnavailableUnavailableNone listed
17.15.1aaffectedUnavailableUnavailableUnavailableNone listed
17.15.2affectedUnavailableUnavailableUnavailableNone listed
17.15.1baffectedUnavailableUnavailableUnavailableNone listed
17.15.1xaffectedUnavailableUnavailableUnavailableNone listed
17.15.1zaffectedUnavailableUnavailableUnavailableNone listed
17.15.3affectedUnavailableUnavailableUnavailableNone listed
17.15.2caffectedUnavailableUnavailableUnavailableNone listed
17.15.2aaffectedUnavailableUnavailableUnavailableNone listed
17.15.1yaffectedUnavailableUnavailableUnavailableNone listed
17.15.2baffectedUnavailableUnavailableUnavailableNone listed
17.15.3aaffectedUnavailableUnavailableUnavailableNone listed
17.15.4affectedUnavailableUnavailableUnavailableNone listed
17.15.3baffectedUnavailableUnavailableUnavailableNone listed
17.15.4daffectedUnavailableUnavailableUnavailableNone listed
17.15.4eaffectedUnavailableUnavailableUnavailableNone listed
17.16.1affectedUnavailableUnavailableUnavailableNone listed
17.16.1aaffectedUnavailableUnavailableUnavailableNone listed
17.17.1affectedUnavailableUnavailableUnavailableNone listed
17.18.1affectedUnavailableUnavailableUnavailableNone listed
17.18.1waffectedUnavailableUnavailableUnavailableNone listed
17.18.1aaffectedUnavailableUnavailableUnavailableNone listed