CVE-2026-201907.5HighCWE-285
Cisco Identity Services Engine Information Disclosure Vulnerability
Cisco · Cisco Identity Services Engine Software
Not in CISA KEV
0.5%probability of exploitation in the next 30 days
43rd percentile
050100
Higher than 43% of scored CVEs
7.5HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 17 Jun.
Quiet for 20 weekslast report 18 Jun2 articles2 outlets
- Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared.
- Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 17 Jun 20:11 | SecurityOnline | Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared |
| 18 Jun 17:21 | Security Affairs | Cisco patches critical ISE flaw letting admins gain root access |
- Cisco patches critical ISE flaw letting admins gain root accessSecurity Affairs · mentions it in passing
- Cisco ISE flaw CVE-2026-20181 allows RCE, data leak fearedSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.