Cisco
CVE-2026-20325: Cisco Nexus Dashboard hardening: Improper Neutralization of Special Elements used in a Command
Nexus Dashboard hardening addresses command, code and template-injection risks without identifying a particular endpoint. Follow the Dashboard release or migration path; the category score does not establish one universal exploit sequence.
CVE-2026-20283: Cisco ISE IPsec Open API Command Injection Vulnerability
ISE IPsec Open API command injection requires administrative access and the specified multi-interface, API-created tunnel configuration. Evaluate connectivity before using Cisco's web-interface recreation workaround, and obtain the permanent CVE-specific software update.
CVE-2026-20284: Cisco ISE SXP REST API SQL Injection Vulnerability
An ISE administrator can read or change database contents through the SXP REST API when SXP and a connection are configured. Apply the specific patch and check new endpoint authentication after maintenance.
CVE-2026-20285: Cisco ISE Authorization Bypass vulnerability
An authenticated Administrator can change file descriptions without required permission checks in ISE or ISE-PIC. Apply the product-specific fix, retaining ISE-PIC's support boundary; this is not established file-content access or root control.
CVE-2026-20286: Cisco ISE Authorization Bypass vulnerability
An ISE Administrator can bypass permission checks to modify file descriptions on management pages. Apply the ISE patch or supported migration; ISE-PIC is excluded from this CVE despite appearing in the shared advisory.
CVE-2026-20194: Cisco ISE hardening: Incorrect Resource Transfer Vulnerabilities
The ISE hardening entry concerns resources crossing security boundaries, but identifies no specific upload or disclosure path. Match ISE versus ISE-PIC to the patch table; an ISE release is not automatically an ISE-PIC upgrade.
CVE-2026-20211: Cisco ISE Remote Code Execution Vulnerability
A highly privileged ISE administrator can submit a crafted serialized Java object and progress from operating-system access to root. Obtain the CVE-specific patch and validate node health and new endpoint authentication after maintenance.
CVE-2026-20222: Cisco Secure Firewall ASA and FTD EIGRP Denial of Service Vulnerability
An adjacent-network attacker can exhaust memory through crafted EIGRP updates and reload vulnerable ASA or FTD devices. Confirm EIGRP is enabled, then obtain the CVE-specific fixed release; this notice describes availability loss, not code execution.
CVE-2026-20234: Cisco ISE hardening: Insufficiently Protected Credential Vulnerabilities
Cisco's ISE hardening entry concerns insufficiently protected credentials but identifies no particular account or credential store. Apply the ISE or ISE-PIC patch guidance without assuming a shared default password or inventing a credential-rotation scope.
CVE-2026-20235: Cisco Identity Services Engine Information Disclosure Vulnerability
An ISE administrator can retrieve sensitive information, including credential hashes, through a crafted API request. Apply the CVE-specific patch and scope suspected exposure; disclosed hashes do not establish direct plaintext-password recovery.