Cisco Identity Services Engine Remote Code Execution and Path Traversal Vulnerabilities

🗓️ 15 Apr 2026 16:00:00Reported by CiscoType

Cisco Identity Services Engine and Passive Identity Connector enable remote code execution by authenticated attackers and path traversal.

Reporter	Title	Published	Views	Family All 25
ATTACKERKB	CVE-2026-20148	15 Apr 202616:03	–	attackerkb
ATTACKERKB	CVE-2026-20147	15 Apr 202616:03	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code.	17 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code.	17 Apr 202600:00	–	bdu_fstec
Circl	CVE-2026-20147	15 Apr 202616:21	–	circl
Circl	CVE-2026-20148	15 Apr 202616:21	–	circl
Tenable Nessus	Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-rce-traversal-8bYndVrZ)	15 Apr 202600:00	–	nessus
CNNVD	Cisco ISE和Cisco ISE-PIC 安全漏洞	15 Apr 202600:00	–	cnnvd
CNNVD	Cisco ISE和Cisco ISE-PIC 安全漏洞	15 Apr 202600:00	–	cnnvd
CVE	CVE-2026-20147	15 Apr 202616:03	–	cve