Remote Code Execution Vulnerability in Cisco ISE

CVE-2026-20282

What is CVE-2026-20282?

A security flaw in Cisco Identity Services Engine (ISE) permits a remote attacker with valid administrative credentials to send a specially crafted HTTP request, resulting in unauthorized write access to the underlying operating system. This vulnerability stems from inadequate validation of user-supplied input, which can lead to severe consequences for affected systems. It is crucial for organizations using Cisco ISE to apply the latest security updates to mitigate potential risks.

References