What is CVE-2025-20126?

CVE-2025-20126 is a medium-severity vulnerability in Apple Macos, classified under Improper Certificate Validation. CVSS score: 4.8/10. Published 2025-01-08.

How severe is CVE-2025-20126?

Medium severity. CVSS v3 base score is 4.8 out of 10.

Vulnerability in Apple Macos

CVE-2025-20126

A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could allow an unauthenticated, remote attacker to intercept or manipulate metrics information. This vulnerability exists bec…

Vulnerability class: Improper Certificate Validation

EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Apple Macos
Cisco Thousandeyes Endpoint Agent — versions 1.200
Cisco Roomos
Cisco Thousandeyes_endpoint_agent

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

psirt@cisco.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-20126?: CVE-2025-20126 is a medium-severity vulnerability in Apple Macos, classified under Improper Certificate Validation. CVSS score: 4.8/10. Published 2025-01-08.
How severe is CVE-2025-20126?: Medium severity. CVSS v3 base score is 4.8 out of 10.