CVE-2026-20195
Last modified
CVE-2026-20195 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This vulnerability exists because error messages are observed when the affected API endpoint is called. An attacker could exploit this vulnerability by sending a series of crafted requests to the affected endpoint and analyzing the differentiated responses. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
A vulnerability in an identity management API endpoint of Cisco ISE could allow an unauthenticated, remote attacker to enumerate valid user accounts on an affected device. This vulnerability exists because error messages are observed when the affected API endpoint is called. An attacker could exploit this vulnerability by sending a series of crafted requests to the affected endpoint and analyzing the differentiated responses. A successful exploit could allow the attacker to compile a list of valid usernames on an affected system.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Identity Services Engine | <= 3.2.0 |
| Cisco | Identity Services Engine | 3.3.0 |
| Cisco | Identity Services Engine | 3.4.0 |
| Cisco | Identity Services Engine | 3.5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-20195?
How severe is CVE-2026-20195?
How do I fix CVE-2026-20195?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-20188Following the initial publication of the Security Advisory a…0
- CVE-2026-20189A vulnerability in the log file download functionality of Ci…4.3
- CVE-2026-2019The Cart All In One For WooCommerce plugin for WordPress is …7.2
- CVE-2026-20190A vulnerability in Cisco ISE and ISE-PIC could allow an unau…7.5
- CVE-2026-20191A vulnerability in Cisco Catalyst Center could allow an unau…7.5
- CVE-2026-20193A vulnerability in the RADIUS Policy API endpoints of Cisco …4.3
- CVE-2026-20198A vulnerability in the web-based management interface of Cis…4.8
- CVE-2026-20199A vulnerability in the SSL certificate handling of Cisco Tho…7.2
- CVE-2026-2020The JS Archive List plugin for WordPress is vulnerable to PH…7.5
- CVE-2026-20200A vulnerability in the web-based management interface of Cis…8.8
- CVE-2026-20202In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, …6.6
- CVE-2026-20203In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, …4.3
Are you affected by CVE-2026-20195?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST