CVE-2026-20192
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
- Published Sep 16, 2026
- CVSS 10.0 critical
- 0.5% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) – CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460 Canadian Centre for Cyber Security ·
- Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks The Hacker News ·
- Multiple vulnerabilities in Cisco products CERT-FR ·