Identity Management API Vulnerability in Cisco ISE

CVE-2026-20195

What is CVE-2026-20195?

A vulnerability exists in the identity management API endpoint of Cisco Identity Services Engine (ISE) that allows an unauthorized remote attacker to enumerate valid user accounts. This flaw arises from improper error handling, which reveals differentiated responses when the API endpoint receives certain crafted requests. An attacker can exploit this weakness by making consecutive requests to the endpoint and analyzing the resulting messages, thereby compiling a list of legitimate usernames on the device. Mitigation measures are essential to protect against unauthorized access and the potential exposure of sensitive user information.

References