CVE-2026-20305
Last modified
CVE-2026-20305 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper validation of user-supplied input.
Description
A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Identity Services Engine Software | 3.1.0; 3.1.0 p1; 3.1.0 p3; 3.1.0 p2; 3.2.0; 3.1.0 p4; 3.1.0 p5; 3.2.0 p1; 3.1.0 p6; 3.2.0 p2; 3.1.0 p7; 3.3.0; 3.2.0 p3; 3.2.0 p4; 3.1.0 p8; 3.2.0 p5; 3.2.0 p6; 3.1.0 p9; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.2.0 p7; 3.3 Patch 4; 3.4 Patch 1; 3.1.0 p10; 3.3 Patch 5; 3.3 Patch 6; 3.4 Patch 2; 3.3 Patch 7; 3.4 Patch 3; 3.5.0; 3.4 Patch 4; 3.3 Patch 8; 3.2 Patch 8; 3.5 Patch 1; 3.3 Patch 9; 3.2 Patch 9; 3.4 Patch 5; 3.5 Patch 3; 3.5 Patch 2; 3.3 Patch 10; 3.3 Patch 11; 3.4 Patch 6; 3.2 Patch 10; 3.1.0 p72; 3.1.0 p11 |
| Cisco | Cisco ISE Passive Identity Connector | 3.2.0; 3.1.0; 3.3.0; 3.4.0 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-20305?
How severe is CVE-2026-20305?
How do I fix CVE-2026-20305?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-2030The WPBakery Page Builder Addons by Livemesh plugin for Word…6.4
- CVE-2026-20300A vulnerability in Cisco ISE could allow an authenticated, r…7.1
- CVE-2026-20301A vulnerability in the Extensible Messaging Client Protocol …8.6
- CVE-2026-20302A vulnerability in the USB driver of Cisco RoomOS could allo…6.1
- CVE-2026-20303As part of Cisco's ongoing commitment to proactive security …9.9
- CVE-2026-20304As part of Cisco's ongoing commitment to proactive security …9.9
- CVE-2026-20306A vulnerability in the REST API of Cisco ISE and ISE-PIC cou…9.1
- CVE-2026-20307A vulnerability in the web-based management interface of Cis…9.9
- CVE-2026-20308A vulnerability in the web-based management interface of Cis…4.3
- CVE-2026-20309A vulnerability in the web-based management interface of Cis…6.1
- CVE-2026-2031An Improper Access Control vulnerability in several internal…10
- CVE-2026-20310As part of Cisco's ongoing commitment to proactive security …9.1
Are you affected by CVE-2026-20305?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST