CVE-2026-20306

A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a DoS condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.

• CWE-78

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cmd-inj-e2CuZCYZ

Published

Sep 16, 2026

Last Modified

Sep 17, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-20300A vulnerability in Cisco ISE could allow an authenticated, r…7.1
• CVE-2026-20301A vulnerability in the Extensible Messaging Client Protocol …8.6
• CVE-2026-20302A vulnerability in the USB driver of Cisco RoomOS could allo…6.1
• CVE-2026-20303As part of Cisco's ongoing commitment to proactive security …9.9
• CVE-2026-20304As part of Cisco's ongoing commitment to proactive security …9.9
• CVE-2026-20305A vulnerability in the diagnostic tools of Cisco ISE and ISE…9.1
• CVE-2026-20307A vulnerability in the web-based management interface of Cis…9.9
• CVE-2026-20308A vulnerability in the web-based management interface of Cis…4.3
• CVE-2026-20309A vulnerability in the web-based management interface of Cis…6.1
• CVE-2026-2031An Improper Access Control vulnerability in several internal…10
• CVE-2026-20310As part of Cisco's ongoing commitment to proactive security …9.1
• CVE-2026-20311A vulnerability in the web-based management interface of Cis…6.3