CVE-2026-20114

Elevated Privilege via Unvalidated Lobby Ambassador API Parameters

View on CVE.org
Published Mar 25, 2026 CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users.

This vulnerability exists because parameters that are received by an API endpoint are not sufficiently validated. An attacker could exploit this vulnerability by authenticating as a Lobby Ambassador user and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to create a new user with privilege level 1 access to the web-based management API. The attacker would then be able to access the device with these new credentials and privileges.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Cisco
Cisco ios Xe Software
Vendors & Products Cisco
Cisco ios Xe Software
Type Values Removed Values Added
Title Elevated Privilege via Unvalidated Lobby Ambassador API Parameters
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because parameters that are received by an API endpoint are not sufficiently validated. An attacker could exploit this vulnerability by authenticating as a Lobby Ambassador user and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to create a new user with privilege level 1 access to the web-based management API. The attacker would then be able to access the device with these new credentials and privileges.
Weaknesses CWE-1286
References
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Mar 25, 2026, 5:34 PM
Reserved
Oct 8, 2025, 11:59 AM

View source JSON

Updated
Mar 25, 2026, 5:34 PM

JSON

Status
Awaiting Analysis
Published
Mar 25, 2026, 4:16 PM
Modified
Jun 17, 2026, 10:17 AM

View source JSON

No data.

Updated
Mar 26, 2026, 11:42 AM

JSON