cisco-sa-ise-multi-G5WP8vvCriticalCVSS 9.1

Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

Published
June 17, 2026
Last Modified
July 6, 2026

🔗 CVE IDs covered (2)

CVE-2026-20181 →CVE-2026-20190 →

📋 Description

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

CVE-2026-20181 — Cisco Identity Services Engine Remote Code Execution Vulnerability (CVSS 3.1 9.1, CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) CVE-2026-20190 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 3.1 7.5, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

🎯 Affected products50

  • Cisco ISE Passive Identity Connector
  • Cisco Identity Services Engine Software
  • Cisco ISE Passive Identity Connector 3.1.0
  • Cisco ISE Passive Identity Connector 3.2.0
  • Cisco ISE Passive Identity Connector 3.3.0
  • Cisco ISE Passive Identity Connector 3.4.0
  • Cisco Identity Services Engine Software 3.1.0
  • Cisco Identity Services Engine Software 3.1.0 p1
  • Cisco Identity Services Engine Software 3.1.0 p10
  • Cisco Identity Services Engine Software 3.1.0 p11
  • Cisco Identity Services Engine Software 3.1.0 p2
  • Cisco Identity Services Engine Software 3.1.0 p3
  • Cisco Identity Services Engine Software 3.1.0 p4
  • Cisco Identity Services Engine Software 3.1.0 p5
  • Cisco Identity Services Engine Software 3.1.0 p6
  • Cisco Identity Services Engine Software 3.1.0 p7
  • Cisco Identity Services Engine Software 3.1.0 p8
  • Cisco Identity Services Engine Software 3.1.0 p9
  • Cisco Identity Services Engine Software 3.2 Patch 10
  • Cisco Identity Services Engine Software 3.2 Patch 8
  • Cisco Identity Services Engine Software 3.2 Patch 9
  • Cisco Identity Services Engine Software 3.2.0
  • Cisco Identity Services Engine Software 3.2.0 p1
  • Cisco Identity Services Engine Software 3.2.0 p2
  • Cisco Identity Services Engine Software 3.2.0 p3
  • Cisco Identity Services Engine Software 3.2.0 p4
  • Cisco Identity Services Engine Software 3.2.0 p5
  • Cisco Identity Services Engine Software 3.2.0 p6
  • Cisco Identity Services Engine Software 3.2.0 p7
  • Cisco Identity Services Engine Software 3.3 Patch 1
  • +20 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address these vulnerabilities.

🔗 References (6)