Medium WID-SEC-2026-2374 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Manipulation von Dateien

Published Jul 15, 2026 · Updated Jul 15, 2026 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um Dateien zu manipulieren.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

Medium 5.5

CVE-2026-20146

Cisco Identity Services Engine Path Traversal Vulnerability

A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system to either read or delete arbitrary fi…

Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices

Jul 15, 2026

Revision history

2026-07-15 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-ise-traversal-xNt7wb2Y vom 2026-07-15
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-traversal-xNt7wb2Y