Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-20190

Cisco Identity Services Engine Information Disclosure Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Identity Services Engine Software

Default version status: unknown

  • 3.4.0affected
  • 3.4 Patch 1affected
  • 3.4 Patch 2affected
  • 3.4 Patch 3affected
  • 3.5.0affected
  • 3.4 Patch 4affected
  • 3.5 Patch 1affected
  • 3.4 Patch 5affected
  • 3.5 Patch 2affected

Cisco Cisco ISE Passive Identity Connector

Default version status: unknown

  • 3.4.0affected

References