CVE-2026-20190
Cisco has fixed multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). The vulnerabilities can be exploited by both authenticated and unauthenticated attackers. An authenticated attacker with administrative rights can send specially crafted HTTP requests to execute arbitrary commands, potentially leading to Denial-of-Service and privilege escalation, compromising the integrity and availability of the systems. Additionally, some vulnerabilities can lead to unauthorized information disclosure. Unauthenticated attackers can also execute arbitrary code remotely and access sensitive information such as hashed login credentials. The cause lies in improper authorization controls when accessing certain resources within the systems.
CSIRTS triage
- What
- Multiple vulnerabilities in Cisco Identity Services Engine can lead to remote code execution and privilege escalation.
- Who is affected
- Deployments of Cisco Identity Services Engine and ISE-PIC are affected.
- Urgency
- Remediation is critical due to the potential for severe security breaches.
- Action
- Update to the latest version of Cisco Identity Services Engine.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2026-20190
Get an email if CVE-2026-20190 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.
Advisory coverage (2)
- criticalCisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilitiescisco-psirt · 2026-07-06
- unknownNCSC-2026-0208 [1.00] [M/H] Vulnerabilities fixed in Cisco Identity Services Enginencsc-nl · 2026-06-19
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2026-20190)