September 2026
CVE-2026-20194: Cisco ISE hardening: Incorrect Resource Transfer Vulnerabilities
The ISE hardening entry concerns resources crossing security boundaries, but identifies no specific upload or disclosure path. Match ISE versus ISE-PIC to the patch table; an ISE release is not automatically an ISE-PIC upgrade.
CVE-2026-20192: Cisco ISE hardening: Access Control Vulnerabilities
Cisco's ISE and ISE-PIC hardening entry covers access-control weaknesses without a single disclosed exploit interface. Use the applicable patch table; related exploitation reporting for another CVE is not direct evidence for this one.
CVE-2026-20176: Cisco ISE Remote Code Execution Vulnerability
A highly privileged ISE administrator can use a crafted HTTP request to gain operating-system access and root privileges. Apply the branch-specific patch and validate new endpoint authentication, particularly on single-node deployments.
CVE-2026-20154: Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
SYN-packet floods can overload ASA and FTD processing of syslog message 419002. Check logging configuration, evaluate Cisco's message-specific rate limit, and install fixed software; do not disable all security logging as a substitute.
CVE-2026-20135: Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
A crafted packet can crash LINA and reload vulnerable FTD devices with TLS 1.3-enabled listeners. Check both conditions, evaluate Cisco's temporary TLS restriction for compatibility, and install the platform-specific fixed software.
CVE-2026-20130: Cisco ISE hardening: Improper Neutralization Vulnerabilities
Cisco's ISE and ISE-PIC hardening entry identifies an injection-related weakness without disclosing a specific interface. Match the product and patch table, retaining legacy Critical-only limits and the separate ISE-PIC support boundary.
CVE-2026-20121: Cisco FTD Bypass Access List
Object Group Search can expose vulnerable ASA and FTD access lists to unauthorized traffic. Match configuration and release using CVE-2026-20121; the paired advisory does not establish a distinct mechanism for each listed CVE.
CVE-2026-20120: Cisco FTD ACL bypass vulnerability
ASA and FTD access lists using Object Group Search can allow traffic that should be blocked. Check both release and configuration, then obtain this CVE's First Fixed release through Cisco Software Checker.
CVE-2026-20072: Cisco ISE Information Disclosure Vulnerability
Cisco ISE administrators with user-management rights can export users outside their assigned group and reveal normally hidden passwords. Review those permissions and apply this CVE's patch; the flaw is not unauthenticated password access.
CVE-2026-20071: Cisco ISE Session Takeover Vulnerability
An adjacent-network attacker can hijack Cisco ISE BYOD onboarding and enter a protected 802.1X network. Review that workflow and install this CVE's branch-specific patch; the companion administrator export flaw has different fixes.