Medium WID-SEC-2026-4350 1 CVE

Cisco Identity Services Engine (ISE): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Published Nov 4, 2026 · Updated Nov 4, 2026 · de-DE

Vendor: Cisco Product: Identity Services Engine (ISE)

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Identity Services Engine (ISE) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Die Cisco Identity Services Engine (ISE) bietet eine attributbasierte Zugangs-Kontroll-Lösung.

Vulnerabilities 1

Medium 5.3

CVE-2026-20241

Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to …

Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices

Nov 4, 2026

Revision history

2026-11-04 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-ise-cert-mE9BD5GO vom 2026-11-04
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO