CVE-2026-20190

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.

• CWE-285

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vvVendor Advisory

Published

Jun 17, 2026

Last Modified

Jun 22, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20185A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2026-20186A vulnerability in Cisco Identity Services Engine (ISE) coul…9.9
• CVE-2026-20187As part of Cisco's ongoing commitment to proactive security …7.5
• CVE-2026-20188Following the initial publication of the Security Advisory a…0
• CVE-2026-20189A vulnerability in the log file download functionality of Ci…4.3
• CVE-2026-2019The Cart All In One For WooCommerce plugin for WordPress is …7.2
• CVE-2026-20191A vulnerability in Cisco Catalyst Center could allow an unau…7.5
• CVE-2026-20193A vulnerability in the RADIUS Policy API endpoints of Cisco …4.3
• CVE-2026-20195A vulnerability in an identity management API endpoint of Ci…5.3
• CVE-2026-20198A vulnerability in the web-based management interface of Cis…4.8
• CVE-2026-20199A vulnerability in the SSL certificate handling of Cisco Tho…7.2
• CVE-2026-2020The JS Archive List plugin for WordPress is vulnerable to PH…7.5