Paper/Archive/CVE-2026-20234

CVE-2026-20234

Cisco Cisco Identity Services Engine Software — Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities

EPSS 0.4%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 34.2.342 × 206.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20234 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.

Affected

ProductAffectedFixed inSource

Cisco Identity Services Engine Software3.1.0–CNA

Cisco Identity Services Engine Software3.1.0 p1–CNA

Cisco Identity Services Engine Software3.1.0 p3–CNA

Cisco Identity Services Engine Software3.1.0 p2–CNA

Cisco Identity Services Engine Software3.2.0–CNA

Cisco Identity Services Engine Software3.1.0 p4–CNA

Cisco Identity Services Engine Software3.1.0 p5–CNA

Cisco Identity Services Engine Software3.2.0 p1–CNA

Cisco Identity Services Engine Software3.1.0 p6–CNA

Cisco Identity Services Engine Software3.2.0 p2–CNA

Cisco Identity Services Engine Software3.1.0 p7–CNA

Cisco Identity Services Engine Software3.3.0–CNA

Scores by source

cisco (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T