CVE-2026-20247

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description An unauthenticated remote attacker can perform SQL injection attacks on an affected device due to improper validation of user-supplied input. By sending a crafted request, an attacker could modify data within the underlying database. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, allowing unauthorized access or manipulation of the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.