Remote Code Execution Vulnerability in Cisco Identity Services Engine

CVE-2026-20180

What is CVE-2026-20180?

A vulnerability in Cisco Identity Services Engine (ISE) permits authenticated, remote attackers to execute arbitrary commands on the operating system of affected devices. This flaw arises from insufficient validation of user-supplied input. By sending a specially crafted HTTP request to the vulnerable system, an attacker with Read Only Admin credentials can gain user-level access and potentially escalate their privileges to root. In single-node ISE deployments, such exploitation may render the node unavailable, leading to a denial of service (DoS) condition, preventing unauthenticated endpoints from accessing the network until recovery.

References