CVE-2026-20305
Awaiting Analysis
Awaiting Analysis - Queue
BaseFortify
Vulnerability report for CVE-2026-20305, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-16
Last updated on: 2026-09-17
Assigner: Cisco Systems, Inc.
Description
Description
A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Cisco | Cisco | Identity Services Engine Software 3.1.0 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p1 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p3 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p2 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p4 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p5 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p1 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p6 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p2 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p7 |
| Cisco | Cisco | Identity Services Engine Software 3.3.0 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p3 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p4 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p8 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p5 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p6 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p9 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 2 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 1 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 3 |
| Cisco | Cisco | Identity Services Engine Software 3.4.0 |
| Cisco | Cisco | Identity Services Engine Software 3.2.0 p7 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 4 |
| Cisco | Cisco | Identity Services Engine Software 3.4 Patch 1 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p10 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 5 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 6 |
| Cisco | Cisco | Identity Services Engine Software 3.4 Patch 2 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 7 |
| Cisco | Cisco | Identity Services Engine Software 3.4 Patch 3 |
| Cisco | Cisco | Identity Services Engine Software 3.5.0 |
| Cisco | Cisco | Identity Services Engine Software 3.4 Patch 4 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 8 |
| Cisco | Cisco | Identity Services Engine Software 3.2 Patch 8 |
| Cisco | Cisco | Identity Services Engine Software 3.5 Patch 1 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 9 |
| Cisco | Cisco | Identity Services Engine Software 3.2 Patch 9 |
| Cisco | Cisco | Identity Services Engine Software 3.4 Patch 5 |
| Cisco | Cisco | Identity Services Engine Software 3.5 Patch 3 |
| Cisco | Cisco | Identity Services Engine Software 3.5 Patch 2 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 10 |
| Cisco | Cisco | Identity Services Engine Software 3.3 Patch 11 |
| Cisco | Cisco | Identity Services Engine Software 3.4 Patch 6 |
| Cisco | Cisco | Identity Services Engine Software 3.2 Patch 10 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p72 |
| Cisco | Cisco | Identity Services Engine Software 3.1.0 p11 |
| Cisco | Cisco | ISE Passive Identity Connector 3.2.0 |
| Cisco | Cisco | ISE Passive Identity Connector 3.1.0 |
| Cisco | Cisco | ISE Passive Identity Connector 3.3.0 |
| Cisco | Cisco | ISE Passive Identity Connector 3.4.0 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
