CVE-2026-20305

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified) Cisco ISE-PIC (affected versions not specified)

Description An issue in the diagnostic tools allows an authenticated remote attacker with administrative credentials to perform command injection on the underlying operating system. This is caused by improper validation of user-supplied input sent to the web-based management interface. A successful exploit enables arbitrary code execution and privilege escalation to root. In single-node deployments, this could lead to a denial of service (DoS) condition, preventing unauthenticated endpoints from accessing the network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.