SQL Injection Vulnerability in Cisco Identity Services Engine

CVE-2026-20284

What is CVE-2026-20284?

A vulnerability exists in the SXP REST API of Cisco's Identity Services Engine (ISE) due to inadequate validation of user-supplied input. An authenticated, remote attacker with valid administrative credentials can exploit this vulnerability by sending crafted input to the REST API, potentially leading to unauthorized viewing or modification of data within the device's underlying database. In instances where the ISE is deployed in a single-node configuration, a successful exploit may also impair the availability of the ISE node, preventing unauthenticated endpoints from accessing the network until the issue is resolved. Attackers must ensure that the SXP service is enabled and at least one SXP connection is configured to fully exploit this weakness.

References