CVE-2026-20283

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description An issue in the IPsec Open API endpoint allows an authenticated remote attacker to inject arbitrary commands into the underlying operating system. This occurs due to insufficient validation of user-supplied input within IPsec Open API calls. To successfully exploit this, an attacker requires valid administrative credentials, and the affected node must have multiple network interfaces, with at least one configured as an active IPsec tunnel. Successful exploitation can lead to root-level access on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.