CVE-2026-20072

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description A flaw in the web-based management interface allows an authenticated remote attacker to obtain sensitive information from network users belonging to security groups other than the one assigned to the attacker. This occurs because certain files lack proper authorization enforcement. An attacker with administrative privileges and management rights over network users can exploit this by exporting users, potentially allowing them to view passwords that are typically hidden from administrators.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.