CVE-2026-20046: Cisco IOS XR Software CLI Privilege Escalation Vulnerability
A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker with a low-privileged account could exploit this vulnerability by using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on an affected device without authorization checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-20046?
CVE-2026-20046 is considered a high-severity privilege escalation vulnerability.
How do I fix CVE-2026-20046?
To fix CVE-2026-20046, upgrade your Cisco IOS XR Software to the latest version that addresses this vulnerability.
Who is affected by CVE-2026-20046?
CVE-2026-20046 affects authenticated local users of Cisco IOS XR Software who can exploit the specific CLI command.
What can attackers achieve with CVE-2026-20046?
Attackers exploiting CVE-2026-20046 can elevate their privileges and gain full administrative control of the affected device.
When was CVE-2026-20046 identified?
CVE-2026-20046 was identified as part of a security assessment addressing vulnerabilities in Cisco IOS XR Software.