CVE-2026-20283

A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system.  This vulnerability is due to insufficient validation of user-supplied input in IPsec Open API calls. An attacker could exploit this vulnerability by sending crafted input to the IPsec Open API endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system.  To exploit this vulnerability, the attacker must have valid administrative credentials and the node must have more than one network interface, one of which must be configured as an active IPsec tunnel. Note: For CVE-2026-20283, Cisco has assigned a Security Impact Rating (SIR) of High rather than Medium as the score indicates. The reason is that it is easy to get to root from the achieved privilege level.

• CWE-78

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc

Published

Sep 16, 2026

Last Modified

Sep 18, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20278As part of Cisco's ongoing commitment to proactive security …8.8
• CVE-2026-20279As part of Cisco's ongoing commitment to proactive security …9.8
• CVE-2026-2028The MaxiBlocks Builder plugin for WordPress is vulnerable to…5.3
• CVE-2026-20280As part of Cisco's ongoing commitment to proactive security …8.8
• CVE-2026-20281A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Ph…7.5
• CVE-2026-20282A vulnerability in Cisco ISE could allow an authenticated, r…4.9
• CVE-2026-20284A vulnerability in the SXP REST API of Cisco ISE could allow…9.1
• CVE-2026-20285A vulnerability in the web-based management interface of Cis…4.3
• CVE-2026-20286A vulnerability in the web-based management interface of Cis…4.3
• CVE-2026-20287As part of Cisco's ongoing commitment to proactive security …6.5
• CVE-2026-20288A vulnerability in the web-based management interface of Cis…6.5
• CVE-2026-20289A vulnerability in the logging subsystem of Cisco RoomOS cou…6.5