Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release

🗓️ 08 Jan 2026 10:44:00Reported by The Hacker NewsType

Cisco patches CVE-2026-20029 in Identity Services Engine and ISE Passive Identity Connector; authenticated admins can read arbitrary files via XML parsing.

Reporter	Title	Published	Views	Family All 41
BDU FSTEC	The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in the improper limitation on XML links to external objects. This allows attackers to load arbitrary files.	14 Jan 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense (FTD) allows a perpetrator to trigger a service failure.	13 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense system allows a perpetrator to gain unauthorized access to confidential information.	13 Feb 202600:00	–	bdu_fstec
Circl	CVE-2026-20026	7 Jan 202618:39	–	circl
Circl	CVE-2026-20027	7 Jan 202619:08	–	circl
Circl	CVE-2026-20029	7 Jan 202618:41	–	circl
Cisco	Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability	7 Jan 202616:00	–	cisco
Cisco	Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilities	7 Jan 202616:00	–	cisco
Tenable Nessus	Cisco Identity Services Engine (cisco-sa-ise-xxe-jWSbSDKt)	7 Jan 202600:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense (FTD) Software Multiple Vulnerabilities (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH)	16 Jan 202600:00	–	nessus

08 Jan 2026 10:44Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.8

EPSS0.05736

SSVC