CVE-2026-20136

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (ISE) (affected versions not specified) Cisco ISE Passive Identity Connector (ISE-PIC) (affected versions not specified)

Description Insufficient validation of user supplied input in the CLI allows an authenticated local attacker with administrative privileges to perform a command injection attack on the underlying operating system. This can lead to the attacker elevating their privileges to root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.