---
id: CVE-2026-20241
title: Cisco Identity Services Engine Authorization Bypass Vulnerability
summary: "A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.\r\n\r\nThis…"
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-285
vendor: Cisco
product: Cisco Identity Services Engine Software
affected:
  - identity_services_engine_software 3.1.0
  - identity_services_engine_software 3.1.0 p1
  - identity_services_engine_software 3.1.0 p3
  - identity_services_engine_software 3.1.0 p2
  - identity_services_engine_software 3.2.0
  - identity_services_engine_software 3.1.0 p4
  - identity_services_engine_software 3.1.0 p5
  - identity_services_engine_software 3.2.0 p1
  - identity_services_engine_software 3.1.0 p6
  - identity_services_engine_software 3.2.0 p2
  - identity_services_engine_software 3.1.0 p7
  - identity_services_engine_software 3.3.0
  - identity_services_engine_software 3.2.0 p3
  - identity_services_engine_software 3.2.0 p4
  - identity_services_engine_software 3.1.0 p8
  - identity_services_engine_software 3.2.0 p5
  - identity_services_engine_software 3.2.0 p6
  - identity_services_engine_software 3.1.0 p9
  - identity_services_engine_software 3.3 Patch 2
  - identity_services_engine_software 3.3 Patch 1
  - identity_services_engine_software 3.3 Patch 3
  - identity_services_engine_software 3.4.0
  - identity_services_engine_software 3.2.0 p7
  - identity_services_engine_software 3.3 Patch 4
  - identity_services_engine_software 3.4 Patch 1
  - identity_services_engine_software 3.1.0 p10
  - identity_services_engine_software 3.3 Patch 5
  - identity_services_engine_software 3.3 Patch 6
  - identity_services_engine_software 3.4 Patch 2
  - identity_services_engine_software 3.3 Patch 7
  - identity_services_engine_software 3.4 Patch 3
  - identity_services_engine_software 3.5.0
  - identity_services_engine_software 3.4 Patch 4
  - identity_services_engine_software 3.3 Patch 8
  - identity_services_engine_software 3.2 Patch 8
  - identity_services_engine_software 3.5 Patch 1
  - identity_services_engine_software 3.3 Patch 9
  - identity_services_engine_software 3.2 Patch 9
  - identity_services_engine_software 3.4 Patch 5
  - identity_services_engine_software 3.5 Patch 3
  - identity_services_engine_software 3.5 Patch 2
  - identity_services_engine_software 3.3 Patch 10
  - identity_services_engine_software 3.3 Patch 11
  - identity_services_engine_software 3.4 Patch 6
  - identity_services_engine_software 3.2 Patch 10
  - identity_services_engine_software 3.1.0 p11
  - ise_passive_identity_connector 3.2.0
  - ise_passive_identity_connector 3.1.0
  - ise_passive_identity_connector 3.3.0
  - ise_passive_identity_connector 3.4.0
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-04T18:17:26.586769Z'
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T18:17:35.484Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-20241'
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO
    label: cisco-sa-ise-cert-mE9BD5GO
tags:
  - cve.org
ingestedAt: '2026-11-05T21:36:00.482Z'
---

## Overview

A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.

This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.

## Affected

- `identity_services_engine_software 3.1.0`
- `identity_services_engine_software 3.1.0 p1`
- `identity_services_engine_software 3.1.0 p3`
- `identity_services_engine_software 3.1.0 p2`
- `identity_services_engine_software 3.2.0`
- `identity_services_engine_software 3.1.0 p4`
- `identity_services_engine_software 3.1.0 p5`
- `identity_services_engine_software 3.2.0 p1`
- `identity_services_engine_software 3.1.0 p6`
- `identity_services_engine_software 3.2.0 p2`
- `identity_services_engine_software 3.1.0 p7`
- `identity_services_engine_software 3.3.0`
- `identity_services_engine_software 3.2.0 p3`
- `identity_services_engine_software 3.2.0 p4`
- `identity_services_engine_software 3.1.0 p8`
- `identity_services_engine_software 3.2.0 p5`
- `identity_services_engine_software 3.2.0 p6`
- `identity_services_engine_software 3.1.0 p9`
- `identity_services_engine_software 3.3 Patch 2`
- `identity_services_engine_software 3.3 Patch 1`
- `identity_services_engine_software 3.3 Patch 3`
- `identity_services_engine_software 3.4.0`
- `identity_services_engine_software 3.2.0 p7`
- `identity_services_engine_software 3.3 Patch 4`
- `identity_services_engine_software 3.4 Patch 1`
- `identity_services_engine_software 3.1.0 p10`
- `identity_services_engine_software 3.3 Patch 5`
- `identity_services_engine_software 3.3 Patch 6`
- `identity_services_engine_software 3.4 Patch 2`
- `identity_services_engine_software 3.3 Patch 7`
- `identity_services_engine_software 3.4 Patch 3`
- `identity_services_engine_software 3.5.0`
- `identity_services_engine_software 3.4 Patch 4`
- `identity_services_engine_software 3.3 Patch 8`
- `identity_services_engine_software 3.2 Patch 8`
- `identity_services_engine_software 3.5 Patch 1`
- `identity_services_engine_software 3.3 Patch 9`
- `identity_services_engine_software 3.2 Patch 9`
- `identity_services_engine_software 3.4 Patch 5`
- `identity_services_engine_software 3.5 Patch 3`
- `identity_services_engine_software 3.5 Patch 2`
- `identity_services_engine_software 3.3 Patch 10`
- `identity_services_engine_software 3.3 Patch 11`
- `identity_services_engine_software 3.4 Patch 6`
- `identity_services_engine_software 3.2 Patch 10`
- `identity_services_engine_software 3.1.0 p11`
- `ise_passive_identity_connector 3.2.0`
- `ise_passive_identity_connector 3.1.0`
- `ise_passive_identity_connector 3.3.0`
- `ise_passive_identity_connector 3.4.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.