PT-2026-33090 · Cisco · Cisco Thousandeyes Enterprise Agent

Published 2026-04-15 · Updated 2026-04-16 · CVE-2026-20161

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco ThousandEyes Enterprise Agent (affected versions not specified)

Description An issue in the CLI allows an authenticated local attacker with low privileges to overwrite arbitrary files on the system. This is caused by improper access controls on the local file system. An attacker can exploit this by placing a symbolic link in a specific location to bypass file system permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2026-05635

CVE-2026-20161

Affected Products

Cisco Thousandeyes Enterprise Agent

References · 4

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-te-agentfilewrite-tqUw3SMU · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20161 · Security Note
• https://bdu.fstec.ru/vul/2026-05635 · Security Note
• https://twitter.com/CVEnew/status/2044737961267225013 · Twitter Post