{"id":"CVE-2026-20241","title":"Cisco Identity Services Engine Authorization Bypass Vulnerability","summary":"A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.\r\n\r\nThis…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssSource":"cna","cwe":["CWE-285"],"vendor":"Cisco","product":"Cisco Identity Services Engine Software","affected":["identity_services_engine_software 3.1.0","identity_services_engine_software 3.1.0 p1","identity_services_engine_software 3.1.0 p3","identity_services_engine_software 3.1.0 p2","identity_services_engine_software 3.2.0","identity_services_engine_software 3.1.0 p4","identity_services_engine_software 3.1.0 p5","identity_services_engine_software 3.2.0 p1","identity_services_engine_software 3.1.0 p6","identity_services_engine_software 3.2.0 p2","identity_services_engine_software 3.1.0 p7","identity_services_engine_software 3.3.0","identity_services_engine_software 3.2.0 p3","identity_services_engine_software 3.2.0 p4","identity_services_engine_software 3.1.0 p8","identity_services_engine_software 3.2.0 p5","identity_services_engine_software 3.2.0 p6","identity_services_engine_software 3.1.0 p9","identity_services_engine_software 3.3 Patch 2","identity_services_engine_software 3.3 Patch 1","identity_services_engine_software 3.3 Patch 3","identity_services_engine_software 3.4.0","identity_services_engine_software 3.2.0 p7","identity_services_engine_software 3.3 Patch 4","identity_services_engine_software 3.4 Patch 1","identity_services_engine_software 3.1.0 p10","identity_services_engine_software 3.3 Patch 5","identity_services_engine_software 3.3 Patch 6","identity_services_engine_software 3.4 Patch 2","identity_services_engine_software 3.3 Patch 7","identity_services_engine_software 3.4 Patch 3","identity_services_engine_software 3.5.0","identity_services_engine_software 3.4 Patch 4","identity_services_engine_software 3.3 Patch 8","identity_services_engine_software 3.2 Patch 8","identity_services_engine_software 3.5 Patch 1","identity_services_engine_software 3.3 Patch 9","identity_services_engine_software 3.2 Patch 9","identity_services_engine_software 3.4 Patch 5","identity_services_engine_software 3.5 Patch 3","identity_services_engine_software 3.5 Patch 2","identity_services_engine_software 3.3 Patch 10","identity_services_engine_software 3.3 Patch 11","identity_services_engine_software 3.4 Patch 6","identity_services_engine_software 3.2 Patch 10","identity_services_engine_software 3.1.0 p11","ise_passive_identity_connector 3.2.0","ise_passive_identity_connector 3.1.0","ise_passive_identity_connector 3.3.0","ise_passive_identity_connector 3.4.0"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-11-04T18:17:26.586769Z"},"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T18:17:35.484Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-20241","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO","label":"cisco-sa-ise-cert-mE9BD5GO"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T21:36:00.482Z","slug":"CVE-2026-20241","body":"## Overview\n\nA vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.\r\n\r\nThis vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.\n\n## Affected\n\n- `identity_services_engine_software 3.1.0`\n- `identity_services_engine_software 3.1.0 p1`\n- `identity_services_engine_software 3.1.0 p3`\n- `identity_services_engine_software 3.1.0 p2`\n- `identity_services_engine_software 3.2.0`\n- `identity_services_engine_software 3.1.0 p4`\n- `identity_services_engine_software 3.1.0 p5`\n- `identity_services_engine_software 3.2.0 p1`\n- `identity_services_engine_software 3.1.0 p6`\n- `identity_services_engine_software 3.2.0 p2`\n- `identity_services_engine_software 3.1.0 p7`\n- `identity_services_engine_software 3.3.0`\n- `identity_services_engine_software 3.2.0 p3`\n- `identity_services_engine_software 3.2.0 p4`\n- `identity_services_engine_software 3.1.0 p8`\n- `identity_services_engine_software 3.2.0 p5`\n- `identity_services_engine_software 3.2.0 p6`\n- `identity_services_engine_software 3.1.0 p9`\n- `identity_services_engine_software 3.3 Patch 2`\n- `identity_services_engine_software 3.3 Patch 1`\n- `identity_services_engine_software 3.3 Patch 3`\n- `identity_services_engine_software 3.4.0`\n- `identity_services_engine_software 3.2.0 p7`\n- `identity_services_engine_software 3.3 Patch 4`\n- `identity_services_engine_software 3.4 Patch 1`\n- `identity_services_engine_software 3.1.0 p10`\n- `identity_services_engine_software 3.3 Patch 5`\n- `identity_services_engine_software 3.3 Patch 6`\n- `identity_services_engine_software 3.4 Patch 2`\n- `identity_services_engine_software 3.3 Patch 7`\n- `identity_services_engine_software 3.4 Patch 3`\n- `identity_services_engine_software 3.5.0`\n- `identity_services_engine_software 3.4 Patch 4`\n- `identity_services_engine_software 3.3 Patch 8`\n- `identity_services_engine_software 3.2 Patch 8`\n- `identity_services_engine_software 3.5 Patch 1`\n- `identity_services_engine_software 3.3 Patch 9`\n- `identity_services_engine_software 3.2 Patch 9`\n- `identity_services_engine_software 3.4 Patch 5`\n- `identity_services_engine_software 3.5 Patch 3`\n- `identity_services_engine_software 3.5 Patch 2`\n- `identity_services_engine_software 3.3 Patch 10`\n- `identity_services_engine_software 3.3 Patch 11`\n- `identity_services_engine_software 3.4 Patch 6`\n- `identity_services_engine_software 3.2 Patch 10`\n- `identity_services_engine_software 3.1.0 p11`\n- `ise_passive_identity_connector 3.2.0`\n- `ise_passive_identity_connector 3.1.0`\n- `ise_passive_identity_connector 3.3.0`\n- `ise_passive_identity_connector 3.4.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}