CVE-2026-20241Medium· 5.3▾ SunlitA vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.
This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
identity_services_engine_software 3.1.0identity_services_engine_software 3.1.0 p1identity_services_engine_software 3.1.0 p3identity_services_engine_software 3.1.0 p2identity_services_engine_software 3.2.0identity_services_engine_software 3.1.0 p4identity_services_engine_software 3.1.0 p5identity_services_engine_software 3.2.0 p1identity_services_engine_software 3.1.0 p6identity_services_engine_software 3.2.0 p2identity_services_engine_software 3.1.0 p7identity_services_engine_software 3.3.0identity_services_engine_software 3.2.0 p3identity_services_engine_software 3.2.0 p4identity_services_engine_software 3.1.0 p8identity_services_engine_software 3.2.0 p5identity_services_engine_software 3.2.0 p6identity_services_engine_software 3.1.0 p9identity_services_engine_software 3.3 Patch 2identity_services_engine_software 3.3 Patch 1identity_services_engine_software 3.3 Patch 3identity_services_engine_software 3.4.0identity_services_engine_software 3.2.0 p7identity_services_engine_software 3.3 Patch 4identity_services_engine_software 3.4 Patch 1identity_services_engine_software 3.1.0 p10identity_services_engine_software 3.3 Patch 5identity_services_engine_software 3.3 Patch 6identity_services_engine_software 3.4 Patch 2identity_services_engine_software 3.3 Patch 7identity_services_engine_software 3.4 Patch 3identity_services_engine_software 3.5.0identity_services_engine_software 3.4 Patch 4identity_services_engine_software 3.3 Patch 8identity_services_engine_software 3.2 Patch 8identity_services_engine_software 3.5 Patch 1identity_services_engine_software 3.3 Patch 9identity_services_engine_software 3.2 Patch 9identity_services_engine_software 3.4 Patch 5identity_services_engine_software 3.5 Patch 3identity_services_engine_software 3.5 Patch 2identity_services_engine_software 3.3 Patch 10identity_services_engine_software 3.3 Patch 11identity_services_engine_software 3.4 Patch 6identity_services_engine_software 3.2 Patch 10identity_services_engine_software 3.1.0 p11ise_passive_identity_connector 3.2.0ise_passive_identity_connector 3.1.0ise_passive_identity_connector 3.3.0ise_passive_identity_connector 3.4.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-20286Medium· 4.3A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the l…
CVE-2026-20285Medium· 4.3A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an aff…
CVE-2026-20306Critical· 9.1A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root
CVE-2026-20305Critical· 9.1A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root
CVE-2026-20284Critical· 9.1A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls
CVE-2026-76423Critical· 10.0A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed wi…