Skip to content
OriginalSign in
Image: Security Affairs

Security AffairsPierluigi Paganini

Cisco patches critical ISE flaw letting admins gain root access

Part of the CVE-2026-20181 story · since 17 Jun

Quiet for 20 weekslast report 18 Jun3 articles3 outlets
17 Jun · SecurityOnline first28 Aug21 SepNowThis article3rd of 3
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access. This article, 3rd of 3.

Cisco has fixed a critical vulnerability, tracked as CVE-2026-20181, in its Identity Services Engine (ISE), which allows authenticated administrators to execute commands and gain root access due to improper user input validation. The vulnerability has a CVSS score of 9.1. Exploitation can lead to privilege escalation and in single-node deployments, it may cause denial-of-service (DoS) conditions for unauthenticated endpoints.

The flaw was patched in ISE/ISE-PIC version 3.3 Patch 11 and 3.4 Patch 6, with a hotfix available for version 3.5. Additionally, Cisco patched another vulnerability (CVE-2026-20190) related to information disclosure with a CVSS score of 7.5. No active exploitation of these vulnerabilities has been reported.

How the story developed

All 3 articles
Quiet for 20 weekslast report 18 Jun3 articles3 outlets

3 articles from 3 outlets since 17 Jun. Quiet since 18 Jun. This was the 3rd report, 21 hours after the first.

Now17 Jun1819201 NovFirst reportSecurityOnline · 17 Jun, 20:11This article3rd of 3 · day 1
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access. This article, 3rd of 3.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Wed 17 JunDay 01
    1. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared20:11 · SecurityOnline · First report
  2. Thu 18 JunDay 12
    1. Cisco patches critical ISE command execution flaw CVE-2026-2018110:32 · SecurityWeek
    2. Cisco patches critical ISE flaw letting admins gain root access17:21 · Security Affairs · This article, 3rd of 3

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in