CISCO: – Reference: Cisco Security Advisory (CVE-2026-20235)

CISCO Security Advisory

Published Date: Not specified

CVE: CVE-2026-20235

Advisory Summary

🗓️ Calendar: 16 Sep 2026

⬛ 🔎 Title: Cisco Identity Services Engine Information Disclosure Vulnerability (CVE-2026-20235)

• A vulnerability has been identified in the API of Cisco Identity Services Engine (ISE) that can let an authenticated, remote attacker view sensitive information on an affected system.
• Exploitation requires valid administrative credentials, raising the risk profile for environments where admin access is exposed or credential hygiene is weak.

• Root cause: insufficient validation of user-supplied parameters in API requests.
• An attacker can send a crafted API request to trigger information disclosure, potentially exposing:
• hashed credentials and other sensitive data
• While this is disclosure (not direct code execution), leaked credential material can enable follow-on attacks (e.g., offline cracking or reuse attempts).

• ✅ Cisco has released software updates that address the issue.
• ❌ No workarounds are available for this vulnerability—patching is the primary remediation path.

• Enforce strong admin authentication policies and reduce standing admin privileges.
• Review for any signs of admin credential compromise or abnormal API usage.
• Monitor ISE API request patterns for malformed/crafted requests and unexpected admin actions.
• Correlate with authentication events and source IP changes.

🔗

-2026-20235

Reference: Vendor Advisory