CVE-2026-20192
Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
At a glance Severity CRITICAL 10.0 EPSS EPSS 0.46 % · percentile 40 (2026-10-27) State PUBLISHED Published 2026-09-16 Updated 2026-09-18 Assigner cisco NVD status Analyzed Description As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20192 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Scores Version Score Vector Scored by CVSS 3.1 CRITICAL 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H cisco CVSS 3.1 CRITICAL 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H NVD · psirt@cisco.com (Secondary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:* ≥ 3.1.0 < 3.3.0cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:*:*:*:*:*:*:*:* ≥ 3.1.0 < 3.3.0cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*+2 more Affected products
References
Sources
