CVE-2026-20046 | Cisco IOS XR up to 25.2.1 CLI access control (cisco-sa-iosxr-privesc-bF8D5U4W)

A vulnerability was found in Cisco IOS XR. It has been classified as critical. Affected is an unknown function of the component CLI. Performing a manipulation results in improper access controls.

This vulnerability is identified as CVE-2026-20046. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is recommended.