high7.5
CVE-2026-20190
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device.
Impact
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Identity Services Engine | Versions 3.4.0, 3.5.0 |
| Cisco | Identity Services Engine Passive Identity Connector | Version 3.4.0 |