Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-20306

Cisco Identity Services Engine Command Injection Vulnerability

CVSS 3.1 9.1 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-20306

Published

A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a DoS condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-20306

Published

Cisco Identity Services Engine Software

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Cisco",
                    "product": "Cisco Identity Services Engine Software",
                    "versions": [
                        {
                            "version": "3.4 Patch 4",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 5",
                            "status": "affected"
                        },
                        {
                            "version": "3.5 Patch 3",
                            "status": "affected"
                        },
                        {
                            "version": "3.4 Patch 6",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Cisco ISE Passive Identity Connector

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Cisco",
                    "product": "Cisco ISE Passive Identity Connector",
                    "versions": [
                        {
                            "version": "3.4.0",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON