CVE-2026-20136
Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability
At a glance Severity MEDIUM 6.0 EPSS EPSS 0.50 % · percentile 43 (2026-10-28) State PUBLISHED Published 2026-04-15 Updated 2026-04-16 Assigner cisco NVD status Analyzed Description A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying operating system and elevate privileges to root.
This vulnerability is due to insufficient validation of user supplied input. An attacker could exploit this vulnerability by providing crafted input to a specific CLI command. A successful exploit could allow the attacker to elevate their privileges to root on the underlying operating system.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N cisco CVSS 3.1 MEDIUM 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N NVD · psirt@cisco.com (Secondary)
Weaknesses (CWE)
European references
Affected configurations (NVD CPE) cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:* < 3.3.0cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:*:*:*:*:*:*:*:* < 3.3.0cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*Affected products
References
Sources
