Cisco Identity Services Engine Software vulnerabilities

24 CVEs affecting Cisco Identity Services Engine Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20352, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-20029, published 2026-01-07. Medium severity, CVSS 4.9. EPSS: 6.2% chance of exploitation in the next 30 days. A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with…
CVE-2026-20305, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate…
CVE-2026-20306, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges…
CVE-2026-20307, published 2026-09-16. Critical severity, CVSS 9.9. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected…
CVE-2026-20176, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the…
CVE-2026-76423, published 2026-09-16. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the…
CVE-2026-20211, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the…
CVE-2026-20282, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to…
CVE-2026-20194, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have…
CVE-2026-20283, published 2026-09-16. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.  This vulnerability…

Latest

CVE-2026-20352, published 2026-09-16. High severity, CVSS 8.6. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected…
CVE-2026-20309, published 2026-09-16. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack…
CVE-2026-20300, published 2026-09-16. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least…
CVE-2026-20287, published 2026-09-16. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have…
CVE-2026-20286, published 2026-09-16. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected…
CVE-2026-20285, published 2026-09-16. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-20284, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of…
CVE-2026-20247, published 2026-09-16. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device. This vulnerability is due to improper validation of…