Skip to content
OpenAdvisories
High WID-SEC-2026-1146 6 CVEs

Cisco Identity Services Engine (ISE): Mehrere Schwachstellen

Published Apr 15, 2026 · Updated Apr 15, 2026 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Identity Services Engine (ISE) ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um seine Privilegien zu erhöhen, um beliebigen Programmcode auszuführen, und um Informationen offenzulegen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 6

  • Critical 9.9
    CVE-2026-20147 EPSS 11%

    Cisco Identity Services Engine Remote Code Execution Vulnerability

    A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative cre…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
  • Critical 9.9
    CVE-2026-20180 Public exploit

    Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability

    A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least Read O…

    Cisco Cisco Identity Services Engine Software Network devices
  • Critical 9.9
    CVE-2026-20186

    Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability

    A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least Read O…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 6.0
    CVE-2026-20136

    Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying oper…

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 4.9
    CVE-2026-20148

    Cisco Identity Services Engine Path Traversal Vulnerability

    A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary files. To exploit this vulnerability, the attacker must have valid administrat…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
  • Medium 4.8
    CVE-2026-20132

    Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative write privileges to conduct a stored cross-site scripting (XSS) attack or a reflected…

    Cisco Cisco Identity Services Engine Software Network devices

Revision history

  1. #1

    Initiale Fassung

References