The vulnerability of the Cisco Identity Services Engine (ISE) platform, a control plane for network policies, stems from insufficient validation of input data. This allows attackers to execute arbitrary code.

🗓️ 09 Jul 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Cisco Identity Services Engine vulnerability due to input validation allows remote code execution.

Reporter	Title	Published	Views	Family All 35
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	27 Jun 202521:07	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	27 Jun 202521:07	–	githubexploit
GithubExploit	Exploit for CVE-2026-20180	21 Apr 202615:21	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	4 Jul 202514:59	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	6 Jul 202513:20	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	3 Jul 202502:10	–	githubexploit
Circl	CVE-2025-20281	25 Jun 202516:47	–	circl
CISA KEV Catalog	Cisco Identity Services Engine Injection Vulnerability	28 Jul 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	28 Jul 202512:00	–	cisa
Cisco	Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities	25 Jun 202516:00	–	cisco

Vulners

Node

OR

cisco_systems cisco_identity_services_engineMatch3.4

cisco_systems cisco_identity_services_engineMatch3.3

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6
t	www.t.me/c/1627154862/198820
web	www.web.nvd.nist.gov/view/vuln/detail

10 Sep 2025 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 39.8

CVSS 210

EPSS0.96732

Identity Services Engine input validation remote code execution network policy vulnerability