NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#thousandeyes

0 stories this week · 0 this month · 2 in 6 months · mostly security

Stories per day · 30 days

2 stories, newest first · one card per story

ZDI Published AdvisoriesSep 22, 2026

ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

ZDI discloses an authenticated DHCP command-injection RCE in Cisco ThousandEyes, CVE-2026-20350, CVSS 7.2.

cisco thousandeyes

1

Cisco Security AdvisoriesSep 16, 2026

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

Cisco patched an authenticated command injection in ThousandEyes Virtual Appliance allowing arbitrary OS command execution with root privileges.

cisco command-injection

1