Cisco ISE Vulnerability Enables Access to Sensitive Data

Cisco identifies vulnerability in ISE network access control devices

The latest flaw in Cisco Systems Identity Services Engine (ISE), which could expose sensitive information to an attacker, requires rotation of credentials as well as installation of a patch to correct, says an expert. Cisco ISE is a network access control platform that enforces access policy and manages endpoints. There have been more critical holes in Cisco products, acknowledged Paddy Harrington, a senior analyst at Forrester Research, and thi…

Cisco ISE Vulnerability Enables Access To Sensitive Data - Cybernoz - Cybersecurity News

Cisco has disclosed a new XML External Entity (XXE) vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could allow authenticated attackers with administrative access to read sensitive data from the underlying operating system. The vulnerability is tracked as CVE-2026-20029 and is rated CVSS 4.9 (medium severity), but its impact is significant in environments where ISE serves as a central…

Cisco ISE Vulnerability Enables Access to Sensitive Data

Cisco has disclosed a new XML External Entity (XXE) vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could allow authenticated attackers with administrative access to read sensitive data from the underlying operating system. The vulnerability is tracked as CVE-2026-20029 and is rated CVSS 4.9 (medium severity), but its […] The post Cisco ISE Vulnerability Enables Access to Sensitive Da…