CVE-2026-20235

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine (affected versions not specified)

Description An issue in the API of Cisco Identity Services Engine (ISE) allows an authenticated remote attacker with administrative credentials to view sensitive information. This occurs due to insufficient validation of user-supplied parameters in API requests, specifically involving XML External Entity (XXE) processing within the MnTRESTLivelogService. An attacker can send a crafted API request to gain access to sensitive data, such as hashed credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.