cisco-sa-ise-unauth-bypass-uxjRXGpbMediumCVSS 5.3

Cisco Identity Services Engine Authentication Bypass Vulnerabilities

Published
May 6, 2026
Last Modified
May 6, 2026

🔗 CVE IDs covered (2)

CVE-2026-20193 →CVE-2026-20195 →

📋 Description

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to bypass authorization mechanisms or examine error messages to gain access to sensitive information on an affected device.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

CVE-2026-20193 — Cisco Identity Services Engine Authentication Bypass Vulnerability (CVSS 3.1 4.3, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) CVE-2026-20195 — Cisco Identity Services Engine Observable Response Discrepancy Vulnerability (CVSS 3.1 5.3, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

🎯 Affected products22

  • Cisco Identity Services Engine Software
  • Cisco Identity Services Engine Software 3.3 Patch 1
  • Cisco Identity Services Engine Software 3.3 Patch 10
  • Cisco Identity Services Engine Software 3.3 Patch 2
  • Cisco Identity Services Engine Software 3.3 Patch 3
  • Cisco Identity Services Engine Software 3.3 Patch 4
  • Cisco Identity Services Engine Software 3.3 Patch 5
  • Cisco Identity Services Engine Software 3.3 Patch 6
  • Cisco Identity Services Engine Software 3.3 Patch 7
  • Cisco Identity Services Engine Software 3.3 Patch 8
  • Cisco Identity Services Engine Software 3.3 Patch 9
  • Cisco Identity Services Engine Software 3.3.0
  • Cisco Identity Services Engine Software 3.4 Patch 1
  • Cisco Identity Services Engine Software 3.4 Patch 2
  • Cisco Identity Services Engine Software 3.4 Patch 3
  • Cisco Identity Services Engine Software 3.4 Patch 4
  • Cisco Identity Services Engine Software 3.4 Patch 5
  • Cisco Identity Services Engine Software 3.4.0
  • Cisco Identity Services Engine Software 3.5 Patch 1
  • Cisco Identity Services Engine Software 3.5 Patch 2
  • Cisco Identity Services Engine Software 3.5 Patch 3
  • Cisco Identity Services Engine Software 3.5.0

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address these vulnerabilities.

🔗 References (4)