CVE-2026-20148

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified) Cisco ISE-PIC (affected versions not specified)

Description Improper validation of user-supplied input allows an authenticated remote attacker with valid administrative credentials to perform path traversal attacks on the underlying operating system. By sending a crafted HTTP request, an attacker can read arbitrary sensitive files from the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.