Cisco Identity Services Engine RCE and Information Disclosure Vulnerabilities (CVE-2026-20181 & CVE-2026-20190)

Cisco released security updates to address two vulnerabilities impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Tracked as CVE-2026-20181 & CVE-2026-20190, successful exploitation of the vulnerabilities may allow a remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. Cisco mentioned in their advisory that they are unaware … Continue reading “Cisco Identity Services Engine RCE and Information Disclosure Vulnerabilities (CVE-2026-20181 & CVE-2026-20190)”