CISCO: 🔗 Cisco Security Advisory: Cisco ISE Hardening Release (September 2026)

CISCO Security Advisory

Published Date: Not specified

CVE: CVE-2026-20130

Advisory Summary

📅 Sep 16, 2026

🔷 Title: Cisco ISE Hardening Release — September 2026 (Critical)

⚠️ What happened
Cisco has published a software hardening release for Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) following a comprehensive internal security review. The update addresses multiple vulnerabilities, including at least one that is known to be actively exploited.

• Impact rating: Critical
• Vulnerability classes: grouped by CWE, with CVE IDs assigned per grouping to simplify tracking and patch management
• Workarounds: None available

• CVE-2026-20130
• CVE-2026-20192
• CVE-2026-20194
• CVE-2026-20234
• CVE-2026-20237
• CVE-2026-20287

• If your environment relies on AAA/authentication/identity flows, the risk is elevated—especially since one issue is actively exploited.
• Without a workaround, the practical mitigation path is upgrade/patch to the fixed release(s) and validate config/behavior post-update.

• Monitor authentication failures/success rates
• Check for unexpected auth bypass patterns and log anomalies
• Review ISE logs around identity/authentication events
• Compare against any detection guidance included in related Cisco advisories (notably the referenced authentication bypass advisory)

📚

Reference: Vendor Advisory