Skip to content
OriginalSign in
Image: SecurityWeek

SecurityWeekIonut Arghire

Cisco patches critical ISE command execution flaw CVE-2026-20181

Part of the CVE-2026-20181 story · since 17 Jun

Quiet for 20 weekslast report 18 Jun3 articles3 outlets
17 Jun · SecurityOnline first28 Aug21 SepNowThis article2nd of 3
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181. This article, 2nd of 3.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access.

Cisco has issued critical security patches for a command execution vulnerability (CVE-2026-20181) affecting its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC), which could allow attackers with admin credentials to execute arbitrary commands on the OS. The vulnerability has a CVSS score of 9.1 and can cause a denial-of-service condition in single-node deployments. Additional high-severity vulnerabilities were addressed in other products, including Webex and Umbrella. Cisco is unaware of these flaws being exploited in the wild, and related updates will be included in future patches.

How the story developed

All 3 articles
Quiet for 20 weekslast report 18 Jun3 articles3 outlets

3 articles from 3 outlets since 17 Jun. Quiet since 18 Jun. This was the 2nd report, 14 hours after the first.

Now17 Jun1819201 NovFirst reportSecurityOnline · 17 Jun, 20:11This article2nd of 3 · day 1
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181. This article, 2nd of 3.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Wed 17 JunDay 01
    1. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared20:11 · SecurityOnline · First report
  2. Thu 18 JunDay 12
    1. Cisco patches critical ISE command execution flaw CVE-2026-2018110:32 · SecurityWeek · This article, 2nd of 3
    2. Cisco patches critical ISE flaw letting admins gain root access17:21 · Security Affairs

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in