Authentication Bypass in Cisco Identity Services Engine Management Interface

CVE-2026-20286

What is CVE-2026-20286?

A security flaw exists in the web-based management interface of the Cisco Identity Services Engine, where inadequate server-side validation allows an authenticated remote attacker to alter the configuration of an affected device. By sending specifically crafted HTTP requests, an attacker with valid Administrator credentials can modify file descriptions and potentially disrupt service integrity. Organizations using affected versions of Cisco ISE should prioritize applying necessary patches to mitigate the risks associated with this vulnerability.

References