Denial of Service Vulnerability in Cisco Identity Services Engine RADIUS Feature

CVE-2026-20352

What is CVE-2026-20352?

A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) enables an unauthenticated, remote attacker to induce a denial of service condition on the device. This issue arises from inadequate handling of specific RADIUS requests, allowing an attacker to send a specially crafted request that disrupts the availability of the ISE node. In scenarios where the ISE operates as a standalone deployment, authentication for endpoints that have not connected prior will be hindered, leaving them unable to access the network until the node is restored to normal operation.

References