Identity & Access
CVE-2026-20307: Cisco ISE Remote Code Execution Vulnerability
A low-privileged ISE administrator can submit a crafted serialized Java object and elevate to root. Apply this CVE's patch and assess earlier access separately; the higher privilege requirement of other ISE flaws does not apply.
CVE-2026-20194: Cisco ISE hardening: Incorrect Resource Transfer Vulnerabilities
The ISE hardening entry concerns resources crossing security boundaries, but identifies no specific upload or disclosure path. Match ISE versus ISE-PIC to the patch table; an ISE release is not automatically an ISE-PIC upgrade.
CVE-2026-20211: Cisco ISE Remote Code Execution Vulnerability
A highly privileged ISE administrator can submit a crafted serialized Java object and progress from operating-system access to root. Obtain the CVE-specific patch and validate node health and new endpoint authentication after maintenance.
CVE-2026-20234: Cisco ISE hardening: Insufficiently Protected Credential Vulnerabilities
Cisco's ISE hardening entry concerns insufficiently protected credentials but identifies no particular account or credential store. Apply the ISE or ISE-PIC patch guidance without assuming a shared default password or inventing a credential-rotation scope.
CVE-2026-20235: Cisco Identity Services Engine Information Disclosure Vulnerability
An ISE administrator can retrieve sensitive information, including credential hashes, through a crafted API request. Apply the CVE-specific patch and scope suspected exposure; disclosed hashes do not establish direct plaintext-password recovery.
CVE-2026-20237: Cisco ISE hardening: Input Validation Vulnerabilities
Cisco's ISE and ISE-PIC hardening entry covers input-validation and path-handling weaknesses without a specific file-access mechanism. Follow product-specific patch guidance; the body retains conflicting published scores rather than resolving them by assumption.
CVE-2026-20071: Cisco ISE Session Takeover Vulnerability
An adjacent-network attacker can hijack Cisco ISE BYOD onboarding and enter a protected 802.1X network. Review that workflow and install this CVE's branch-specific patch; the companion administrator export flaw has different fixes.
CVE-2026-20072: Cisco ISE Information Disclosure Vulnerability
Cisco ISE administrators with user-management rights can export users outside their assigned group and reveal normally hidden passwords. Review those permissions and apply this CVE's patch; the flaw is not unauthenticated password access.
CVE-2026-20130: Cisco ISE hardening: Improper Neutralization Vulnerabilities
Cisco's ISE and ISE-PIC hardening entry identifies an injection-related weakness without disclosing a specific interface. Match the product and patch table, retaining legacy Critical-only limits and the separate ISE-PIC support boundary.
CVE-2026-20176: Cisco ISE Remote Code Execution Vulnerability
A highly privileged ISE administrator can use a crafted HTTP request to gain operating-system access and root privileges. Apply the branch-specific patch and validate new endpoint authentication, particularly on single-node deployments.