380 matches found
CVE-2025-20281-Cisco
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...
CVE-2025-20281-2-Cisco-ISE-RCE
CVE-2025-20281-2-Cisco-ISE-RCE Unauthenticated Python PoC for CVE-2025-20281 RCE against Cisco ISE API CVE-2025-20281 Unauthenticated PoC A minimal Python proof-of-concept that exploits the unauthenticated RCE in Cisco ISEโs ERS API CVE-2025-20281 by injecting arbitrary shell commands into the...
Cisco-CVE-2025-20281-illdeed
CVE-2025-20281 โ Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. ๐ฉป...
Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload
Cisco ISE and Cisco ISE-PIC contain an unrestricted file upload vulnerability caused by lack of file validation in an internal API, letting unauthenticated remote attackers upload and execute files as root, exploit requires crafted file upload. id: CVE-2025-20282 info: name: Cisco ISE 3.4P2 -...
Cisco ISE - Remote Code Execution
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability. This vulnerability is due to...
CiscoISE-CVE-2025-20282-POC
Cisco ISE CVE 2025-20282 ๆฆๅฟต้ช่ฏ Writeup๏ผhttps://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ ่ฏฅ Python ่ๆฌๆปฅ็จไบๆช็ป้ช่ฏๅณๅฏๅจ /admin/files-upload/ ไฝฟ็จ็ไธไผ ๅ่ฝใ ่ๆฌๅจๆฌๅฐๅๅปบไธไธช bin ๆไปถๅคนๅไธไธชๅไธบ isehourlycron.sh ็ๆไปถ๏ผๅนถ็จ Cisco ISE ๅฎ่ฃ ๏ผไฝไบ /opt/CSMS/bin ็ฎๅฝ๏ผ็ๅๅงๅ ๅฎนๅกซๅ ่ฏฅๆไปถ๏ผ่ฏฅๆไปถ็ป่ฟ base64 ็ผ็ ๅนถๅ ๅซๅจ่ๆฌไธญ๏ผใ...
CVE-2026-20180
Cisco ISE RCE๏ผ้ซ็บงๅฉ็จไธไฟฎๅคๅๆ ๐ ็ฎๅฝ 1. ๆง่กๆ่ฆ 2. ๆปๅป้ขๅๆ 3. ๅฉ็จๅ้ 4. ้ซ็บง่ง้ฟๆๆฏ 5. ๅฏน้ถไฟกไปปๆถๆ็็ณป็ปๆงๅฝฑๅ 6. ไฟฎๅค็ญ็ฅ 7. ๅ่ฏ่ฐๆฅ 8. ๅ่่ตๆ ๐ฏ ๆง่กๆ่ฆ Cisco Identity Services Engine ISE ไธญ็่ฟ็จไปฃ็ ๆง่ก๏ผRCE๏ผๆผๆดไปฃ่กจไบไผไธ่พน็ๅฎๅ จไธญ็ๅ ณ้ฎๆญ่ฃ็นใๅฏนไบ็ฒพ่ฑๅฎๅ จ็ ็ฉถไบบๅ่่จ๏ผISE ไธไป ไป ๆฏ่บซไปฝ้ช่ฏ็ปไปถ๏ผๅฎๆฏๆงๅถๆดไธช็ฝ็ปๅบ็ก่ฎพๆฝ่ฎฟ้ฎๆ้็ไธป้ฅๅ ใ ไธฅ้้ฃ้ฉ๏ผ ๆช่ฎค่ฏ็ๆปๅป่ ๅฏๅจไธๅฐ 5 ๅ้ๅ ่ทๅพ็ณป็ป็ๅฎๅ จๆงๅถๆ๏ผไธไธไผๅจไผ ็ป็ๆง็ณป็ปไธญ็ไธๅฏๆฃๆต็็่ฟนใ ๐ ๆปๅป้ขๅๆ 1.1 N...
Blackash-CVE-2025-20343
๐ CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability ๐ โ ๏ธ Overview ๐จ High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! ๐ฅ An unauthenticated remote attacker can crash the device with crafted RADIUS packets. ๐ Disclosed : November 5, 2025 โ No known...
PT-2026-60218
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...
CVE-2026-20190
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted...
CVE-2026-20181
A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to...
PT-2026-50459
Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description Improper authorization checks when accessing a resource could allow an unauthenticated, remote attacker to view sensitive information on an...
CVE-2026-20193
A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device. This vulnerability is due to improper role-based access control RBAC...
CVE-2026-20132
Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting XSS attack or a reflected XSS attack against a user of the web-based...
CVE-2026-20186
A vulnerability in Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least Read Only Admin credentials. This vulnerabilit...
EUVD-2026-27862
A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device. This vulnerability is due to improper role-based access control RBAC...
CVE-2026-20195
A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This vulnerability exists because error messages are observed when the affected API endpoint is called. An attacker could...
CVE-2026-20193
A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device. This vulnerability is due to improper role-based access control RBAC...
CVE-2026-20195
A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This vulnerability exists because error messages are observed when the affected API endpoint is called. An attacker could...
Cisco ISE ๅฎๅ จๆผๆด
Cisco ISE is a NAC solution developed by the American company Cisco. It is used to manage access to network resources for endpoints, users, and devices in a zero-trust architecture. Cisco ISE has a security vulnerability that stems from improper role-based access control permissions on the RADIUS...