CVE-2026-20072
Last modified
CVE-2026-20072 is a medium-severity vulnerability rated 4.9/10 on the CVSS scale. A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper authorization enforcement. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper authorization enforcement. An attacker with administrative privileges and management rights over network users could exploit this vulnerability by exporting the users. A successful exploit could allow the attacker to view passwords that are normally not visible to administrators.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Identity Services Engine Software | 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; 3.1.0 p5; 3.2.0 p1; 3.1.0 p6; 3.2.0 p2; 3.1.0 p7; 3.3.0; 3.2.0 p3; 3.2.0 p4; 3.1.0 p8; 3.2.0 p5; 3.2.0 p6; 3.1.0 p9; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.2.0 p7; 3.3 Patch 4; 3.4 Patch 1; 3.1.0 p10; 3.3 Patch 5; 3.3 Patch 6; 3.4 Patch 2; 3.3 Patch 7; 3.4 Patch 3; 3.5.0; 3.4 Patch 4; 3.5 Patch 1; 3.4 Patch 5; 3.5 Patch 3; 3.5 Patch 2; 3.4 Patch 6; 3.1.0 p72; 3.1.0 p11 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-20072?
How severe is CVE-2026-20072?
How do I fix CVE-2026-20072?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-20067Multiple Cisco products are affected by a vulnerability in t…5.8
- CVE-2026-20068Multiple Cisco products are affected by a vulnerability in t…5.8
- CVE-2026-20069A vulnerability in the VPN web services component of Cisco S…4.3
- CVE-2026-2007Heap buffer overflow in PostgreSQL pg_trgm allows a database…8.2
- CVE-2026-20070A vulnerability in the VPN web services component of Cisco S…6.1
- CVE-2026-20071A vulnerability in the SSID bring-your-own-device (BYOD) onb…3.8
- CVE-2026-20073A vulnerability in Cisco Secure Firewall Adaptive Security A…5.8
- CVE-2026-20074A vulnerability in the Intermediate System-to-Intermediate S…7.4
- CVE-2026-20075A vulnerability in the web-based management interface of Cis…4.8
- CVE-2026-20076A vulnerability in the web-based management interface of Cis…4.8
- CVE-2026-20078Multiple vulnerabilities in Cisco Unity Connection could all…6.5
- CVE-2026-20079A vulnerability in the web interface of Cisco Secure Firewal…10
Are you affected by CVE-2026-20072?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST