Skip to content

Cisco product

Identity Services Engine Software

Alert
No Identity Services Engine Software CVE is in the CISA KEV catalogue.

Tracked since 17 Jun · latest article 17 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

1High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No Identity Services Engine Software CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds Identity Services Engine Software CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a Identity Services Engine Software CVE to KEV.

Fix listed

0 of 8 CVEs in coverage

8 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-20181: 95.2th percentileCVE-2026-20305: 75th percentileCVE-2026-20307: 62.1th percentileCVE-2026-20283: 50.3th percentileCVE-2026-20282: 48.3th percentileCVE-2026-76423: 47.7th percentileCVE-2026-20284: 44.9th percentileCVE-2026-20190: 42.9th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-2018195.2
CVE-2026-2030575
CVE-2026-2030762.1
CVE-2026-2028350.3
CVE-2026-2028248.3
CVE-2026-7642347.7
CVE-2026-2028444.9
CVE-2026-2019042.9

Coverage5 articles · all time

The latest 5 articles naming Identity Services Engine Software, in the shared story grammar.

Full timeline
Quiet for 6 weekslast report 17 Sep5 articles3 outlets

5 articles from 3 outlets since 17 Jun. Quiet since 17 Sep.

Now17 Jun192016 Sep1819First reportSecurityOnline · 17 Jun, 20:11Picked up againafter 13 weeks quiet
  • Wed 17 Jun, 20:11 UTC. SecurityOnline, first report. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared.
  • Thu 18 Jun, 10:32 UTC. SecurityWeek, its first report on the story. Cisco patches critical ISE command execution flaw CVE-2026-20181.
  • Thu 18 Jun, 17:21 UTC. Security Affairs, its first report on the story. Cisco patches critical ISE flaw letting admins gain root access.
  • Thu 17 Sep, 02:36 UTC. SecurityOnline. Cisco Patches Critical ISE Flaws Enabling Unauthenticated Admin Access.
  • Thu 17 Sep, 12:30 UTC. SecurityWeek. Cisco Patches Dozens of Flaws as ISE Zero Day Faces Exploitation.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 5 articles as a list
  1. Wed 17 JunDay 01
    1. Cisco ISE flaw CVE-2026-20181 allows RCE, data leak feared20:11 · SecurityOnline · First report
  2. Thu 18 JunDay 12
  3. Quiet for 13 weeks

    Thu 17 SepDay 922

All CVEs in coverage8

Exploited first, then by EPSS

In the CVE tracker
  • Cisco Identity Services Engine Remote Code Execution Vulnerability

    9.1Critical8.9% EPSS · 3 articles
  • Cisco Identity Services Engine Command Injection Vulnerability

    9.1Critical1.6% EPSS · 1 article
  • Cisco Identity Services Engine Remote Code Execution Vulnerability

    9.9Critical1.0% EPSS · 1 article
  • Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability

    6.5Medium0.6% EPSS · 1 article
  • Cisco Identity Services Engine Authenticated Write Vulnerability

    4.9Medium0.6% EPSS · 1 article
  • Cisco ISE API Authentication Bypass Vulnerability

    10.0Critical0.6% EPSS · 1 article
  • Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability

    9.1Critical0.5% EPSS · 2 articles
  • Cisco Identity Services Engine Information Disclosure Vulnerability

    7.5High0.5% EPSS · 2 articles
Updated AboutDevelopersSign in