Command Injection Vulnerability in Cisco ISE IPsec Open API

CVE-2026-20283

What is CVE-2026-20283?

A command injection vulnerability exists within the IPsec Open API endpoint of Cisco Identity Services Engine (ISE). This flaw arises from inadequate validation of user-supplied input in API calls. An authenticated remote attacker could exploit this vulnerability by submitting specially crafted input to the IPsec Open API endpoint on susceptible devices. If successfully executed, it may enable the attacker to run arbitrary commands on the underlying operating system. To exploit this flaw, the attacker must possess valid administrative credentials and the device must be configured with multiple network interfaces, with at least one set up as an active IPsec tunnel.

References