Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities
Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct SQL injections, modify data, or execute arbitrary commands on the underlying operating system on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: For CVE-2026-20282 and CVE-2026-20283, Cisco has assigned a Security Impact Rating (SIR) of High rather than Medium as the scores indicate. The reason is that it is easy to get to root from the achieved privilege level. Cisco has released software updates that ad
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- Identity Services Engine
- Fix
- available
- Exposure class
- Identity
Why it ranks 31 (Notable)
- Exposed product class: identity
- Widely deployed vendor product (Cisco)
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-20282 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-20283 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-20284 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.