Skip to content
OriginalSign in
Image: SecurityOnline

SecurityOnlineDo Son

Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared

Part of the CVE-2026-20181 story · since 17 Jun

Quiet for 20 weekslast report 18 Jun3 articles3 outlets
17 Jun · SecurityOnline first28 Aug21 SepNowThis article1st of 3
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared. This article, 1st of 3.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access.

The page discusses critical vulnerabilities in the Cisco Identity Services Engine (ISE) and the ISE Passive Identity Connector (ISE-PIC). Two main vulnerabilities are highlighted: CVE-2026-20181, which allows remote code execution with a CVSS score of 9.1, requiring administrative credentials for exploitation, and CVE-2026-20190, which enables unauthorized information disclosure with a CVSS score of 7.5.

Patches are available, and users are urged to update to specific software versions immediately to mitigate risks. Both vulnerabilities not only pose significant security threats but also demand prompt action to prevent potential breaches.

How the story developed

All 3 articles
Quiet for 20 weekslast report 18 Jun3 articles3 outlets

3 articles from 3 outlets since 17 Jun. Quiet since 18 Jun. This was the first report.

Now17 Jun1819201 NovFirst reportSecurityOnline · 17 Jun, 20:11
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared. This article, 1st of 3.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Wed 17 JunDay 01
    1. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared20:11 · SecurityOnline · First report · This article, 1st of 3
  2. Thu 18 JunDay 12
    1. Cisco patches critical ISE command execution flaw CVE-2026-2018110:32 · SecurityWeek
    2. Cisco patches critical ISE flaw letting admins gain root access17:21 · Security Affairs

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in