CVE-2025-20126

The CVE-2025-20126 vulnerability affects Cisco ThousandEyes Endpoint Agent for macOS and RoomOS, arising from improper certificate validation in the hosted metrics service validation routine. An unauthenticated, remote attacker could intercept or alter metrics communications via a crafted certifi...

CVE-2025-20259

Cisco ThousandEyes Endpoint Agent for Windows is affected by vulnerabilities in the update process that allow an authenticated, local attacker to delete arbitrary files via a symbolic-link upgrade path. Root cause: improper access controls on local filesystem during the agent upgrade, enabling th...