Paper/Archive/CVE-2026-20237

CVE-2026-20237

Cisco Cisco Identity Services Engine Software — Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 41.3.413 × 208.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20237 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.

Affected

ProductAffectedFixed inSource

Cisco Identity Services Engine Software3.1.0–CNA

Cisco Identity Services Engine Software3.1.0 p1–CNA

Cisco Identity Services Engine Software3.1.0 p3–CNA

Cisco Identity Services Engine Software3.1.0 p2–CNA

Cisco Identity Services Engine Software3.2.0–CNA

Cisco Identity Services Engine Software3.1.0 p4–CNA

Cisco Identity Services Engine Software3.1.0 p5–CNA

Cisco Identity Services Engine Software3.2.0 p1–CNA

Cisco Identity Services Engine Software3.1.0 p6–CNA

Cisco Identity Services Engine Software3.2.0 p2–CNA

Cisco Identity Services Engine Software3.1.0 p7–CNA

Cisco Identity Services Engine Software3.3.0–CNA

Scores by source

cisco (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T