Paper/Archive/CVE-2026-20192

CVE-2026-20192

Cisco Cisco Identity Services Engine Software — Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities

EPSS 0.5%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 40.1.401 × 208.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

Affected

ProductAffectedFixed inSource

Cisco Identity Services Engine Software3.1.0–CNA

Cisco Identity Services Engine Software3.1.0 p1–CNA

Cisco Identity Services Engine Software3.1.0 p3–CNA

Cisco Identity Services Engine Software3.1.0 p2–CNA

Cisco Identity Services Engine Software3.2.0–CNA

Cisco Identity Services Engine Software3.1.0 p4–CNA

Cisco Identity Services Engine Software3.1.0 p5–CNA

Cisco Identity Services Engine Software3.2.0 p1–CNA

Cisco Identity Services Engine Software3.1.0 p6–CNA

Cisco Identity Services Engine Software3.2.0 p2–CNA

Cisco Identity Services Engine Software3.1.0 p7–CNA

Cisco Identity Services Engine Software3.3.0–CNA

Scores by source

cisco (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T