MDR
Solutions
Partners
About
Resources
Critical
CVE-2026-20181, CVE-2026-20190
Cisco
June 22, 2026
Cisco disclosed two vulnerabilities affecting Cisco ISE and ISE-PIC. The vulnerabilities could allow a remote attacker to achieve remote code execution or conduct information disclosure attacks.
Cisco
Network accessible, unauthenticated
Apply vendor patch
Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), all releases regardless of device configuration. Note: Cisco ISE-PIC has reached end-of-sale; release 3.4 is the last supported release.
CVE-2026-20181 enables full operating system control of the ISE appliance from root, and in single-node deployments causes a denial of service that prevents endpoint network authentication until the node is restored. CVE-2026-20190 exposes hashed credentials that could be cracked offline and used in subsequent attacks against network infrastructure, user accounts, or downstream systems.
CVE-2026-20181 (CVSS 9.1) - A vulnerability in Cisco ISE and ISE-PIC due to insufficient validation of user-supplied input allows an authenticated remote attacker with valid administrative credentials to execute arbitrary commands on the underlying operating system via a crafted HTTP request. The attacker can initially obtain user-level OS access and then elevate privileges to root. In single-node deployments, successful exploitation can cause the ISE node to become unavailable, resulting in a denial of service condition and preventing unauthenticated endpoints from accessing the network until the node is restored.
CVE-2026-20190 (CVSS 7.5) - A vulnerability in Cisco ISE and ISE-PIC due to improper authorization checks when a resource is accessed allows an unauthenticated remote attacker to view sensitive information including hashed credentials by sending crafted traffic to an affected device. The hashed credentials obtained could be used to mount further attacks.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore Managed Detection and ResponseAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
Cisco Security Advisory: cisco-sa-ise-multi-G5WP8vv. CVEs: CVE-2026-20181, CVE-2026-20190.
.jpg)