Cisco ISE and ISE-PIC Command Injection Vulnerability

CVE-2026-20306

What is CVE-2026-20306?

A security vulnerability in Cisco ISE and ISE-PIC's REST API could permit an authenticated remote attacker to execute command injection attacks against the underlying operating system. This would allow the attacker to potentially elevate privileges to root. The exploit involves improper validation of user input, where crafted commands sent to the web-based management interface could lead to executing arbitrary code on the affected device. In single-node setups, successful exploitation may result in a denial-of-service condition, preventing unauthenticated endpoints from network access until the system is recovered.

References