CVE-2026-20180

CVE Enrichment

CVSS: 9.9 CRITICAL
EPSS: 6.02%
EPSS Percentile: 93.38%
CISA KEV: Not listed

Description

A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least Read Only Admin credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node ISE deployments, successful exploitation of these vulnerabilities could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 16-Apr-2026 00:17
Last Modified: 27-Oct-2026 05:10
EPSS Date: 2026-11-05
CWE: CWE-22

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:C /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

Cisco · Cisco Identity Services Engine Software Source: CNA · [email protected]
Default status: unknown

3.1.0 — affected
3.1.0 p1 — affected
3.1.0 p3 — affected
3.1.0 p2 — affected
3.2.0 — affected
3.1.0 p4 — affected
3.1.0 p5 — affected
3.2.0 p1 — affected
3.1.0 p6 — affected
3.2.0 p2 — affected
3.1.0 p7 — affected
3.3.0 — affected
3.2.0 p3 — affected
3.2.0 p4 — affected
3.1.0 p8 — affected
3.2.0 p5 — affected
3.2.0 p6 — affected
3.1.0 p9 — affected
3.3 Patch 2 — affected
3.3 Patch 1 — affected
3.3 Patch 3 — affected
3.4.0 — affected
3.2.0 p7 — affected
3.3 Patch 4 — affected
3.4 Patch 1 — affected
3.1.0 p10 — affected
3.3 Patch 5 — affected
3.3 Patch 6 — affected
3.4 Patch 2 — affected
3.3 Patch 7 — affected
3.4 Patch 3 — affected
3.5.0 — affected
3.2 Patch 8 — affected

Affected Products / Versions

cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 3.2.0
cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.2.0
cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.3.0
cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*
cisco / identity_services_engine Source: NVD CPE · affected
Version / affected range: 3.4.0
cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 05-Nov-2026 22:40
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

Two additional ISE vulnerabilities (CVE-2026-20180 and CVE-2026-20186) let attackers with limited privileges execute commands and escalate access. Cisco Patches ISE and Webex Flaws That Could Enable RCE and User Impersonation
Three critical Identity Services Engine flaws (CVE-2026-20147, CVE-2026-20180, CVE-2026-20186) could enable arbitrary OS command execution if attackers have administrative credentials. Cisco patches critical Webex SSO flaw and requires customers to upload a new SAML certificate

CVE (4)

Malware (1)

People (1)

MITRE ATT&CK (1)

Vendors (1)

Products (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.