Critical RCE Flaws in Cisco ISE and ISE-PIC Allow Unauthenticated Attackers to Gain Root Access

🗓️ 26 Jun 2025 13:24:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 10 Views

Cisco updates fix critical RCE flaws in ISE and ISE-PIC allowing unauthenticated root access.

Reporter	Title	Published	Views	Family All 69
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	27 Jun 202521:07	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	27 Jun 202521:07	–	githubexploit
GithubExploit	Exploit for CVE-2026-20180	21 Apr 202615:21	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	4 Jul 202514:59	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	6 Jul 202513:20	–	githubexploit
GithubExploit	Exploit for Injection in Cisco Identity_Services_Engine	3 Jul 202502:10	–	githubexploit
ATTACKERKB	CVE-2025-20282	25 Jun 202517:15	–	attackerkb
BDU FSTEC	The vulnerability of the Cisco Identity Services Engine (ISE) platform, which relates to the use of strictly encrypted login credentials, allows a hacker to alter the software configuration.	6 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the private application programming interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code.	27 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Identity Services Engine (ISE) platform, a control plane for network policies, stems from insufficient validation of input data. This allows attackers to execute arbitrary code.	9 Jul 202500:00	–	bdu_fstec

26 Jun 2025 13:24Current

9.2High risk

Vulners AI Score9.2

CVSS 3.110

EPSS0.96732

SSVC

cisco updates rce vulnerabilities unauthenticated access cve-2025-20281 cve-2025-20282 security flaws.