Remote Command Execution Vulnerability in Cisco Identity Services Engine

CVE-2026-20186

What is CVE-2026-20186?

A vulnerability in Cisco Identity Services Engine (ISE) enables an authenticated remote attacker with Read Only Admin credentials to execute arbitrary commands on the operating system of the affected device. This weakness arises from inadequate validation of user-supplied input. By crafting a malicious HTTP request, attackers can gain user-level access and potentially elevate privileges to root. In single-node deployments, this could lead to a denial of service (DoS), making the ISE node unavailable and preventing unauthenticated endpoints from accessing the network until the node is restored.

References