PT-2026-27797 · Cisco · Cisco Ios Xe

Published 2026-03-25 · Updated 2026-03-30 · CVE-2026-20114

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A flaw exists in the Lobby Ambassador web-based management API of Cisco IOS XE Software that could allow an authenticated, remote attacker to gain elevated privileges and access management APIs normally unavailable to Lobby Ambassador users. This is due to insufficient validation of parameters received by an API endpoint. An attacker can exploit this by authenticating as a Lobby Ambassador user and sending a crafted HTTP request to a vulnerable device. Successful exploitation could allow the attacker to create a new user with privilege level 1 access to the web-based management API, enabling access to the device with elevated credentials. The vulnerable API endpoint receives HTTP requests with insufficiently validated parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1286

Related Identifiers

BDU:2026-06474

CVE-2026-20114

Affected Products

Cisco Ios Xe

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-lobby-privesc-KwxBqJy · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20114 · Security Note
• https://bdu.fstec.ru/vul/2026-06474 · Security Note
• https://reddit.com/r/pwnhub/comments/1s4so3w/cisco_addresses_serious_vulnerabilities_in_ios · Reddit Post
• https://twitter.com/CVEnew/status/2038618149038199173 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1s3q3cp/cisco_catalyst_switch_vulnerabilities_could_lead · Reddit Post