Vulnerabilities found in Cisco Identity Services Engine (ISE)

🗓️ 17 Sep 2026 09:24:38Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 28 Views

Cisco ISE and ISE-PIC: 21 vulnerabilities, some actively exploited, with unauthenticated root RCE.

Reporter	Title	Published	Views	Family All 188
BDU FSTEC	The vulnerability in the application software interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.	17 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SXP platform for managing Cisco Identity Services Engine policies allows a perpetrator to cause a service failure.	23 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.	23 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.	23 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code and elevate their privileges to the root level.	23 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.	23 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-20130	16 Sep 202622:07	–	circl
Circl	CVE-2026-20176	16 Sep 202617:17	–	circl
Circl	CVE-2026-20192	16 Sep 202622:08	–	circl
Circl	CVE-2026-20194	16 Sep 202622:08	–	circl

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-e2CuZCYZ
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-hrP9jQSQ
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57

17 Sep 2026 09:24Current

8.2High risk

Vulners AI Score8.2

CVSS 3.110

EPSS0.14026

SSVC

Cisco Identity Services Engine authentication bypass REST API root command execution actively exploited