Improper Privilege Management in Cisco Identity Services Engine and ISE-PIC

CVE-2026-20287

What is CVE-2026-20287?

Cisco has identified vulnerabilities within the Cisco Identity Services Engine and ISE Passive Identity Connector, associated with improper privilege management. Following a thorough internal security review, the engineering teams have released a software hardening update designed to mitigate these vulnerabilities, emphasizing an ongoing commitment to security and product integrity. The issues fall under the Common Weakness Enumeration pillar, specifically CWE-269, which could potentially lead to unauthorized actions within the affected products.

References