CVE-2025-20283

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This vulnerability is due to insufficient validation of user-supplied input. An attacker with valid credentials could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, the attacker must have valid high-privileged credentials.

• CWE-74

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-3VpsXOxOVendor Advisory

Published

Jul 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20278A vulnerability in the CLI of multiple Cisco Unified Communi…6.7
• CVE-2025-20279A vulnerability in the web-based management interface of Cis…4.8
• CVE-2025-2028Lack of TLS validation when downloading a CSV file including…5.3
• CVE-2025-20280A vulnerability in the web-based management interface of Cis…4.8
• CVE-2025-20281A vulnerability in a specific API of Cisco ISE and Cisco ISE…10
• CVE-2025-20282A vulnerability in an internal API of Cisco ISE and Cisco IS…10
• CVE-2025-20284A vulnerability in a specific API of Cisco ISE and Cisco ISE…7.2
• CVE-2025-20285A vulnerability in the IP Access Restriction feature of Cisc…4.1
• CVE-2025-20286A vulnerability in Amazon Web Services (AWS), Microsoft Azur…9.8
• CVE-2025-20287A vulnerability in the web-based management interface of Cis…8.8
• CVE-2025-20288A vulnerability in the web-based management interface of Cis…5.3
• CVE-2025-20289Multiple vulnerabilities in the web-based management interfa…5.4