← Database

CVE-2026-20190

HIGH CVSS: 7.5 Published: 2026-06-17 Modified: 2026-06-22

Description

A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.

Affected Platforms

Cisco Identity Services Engine Passive Identity ConnectorCisco Identity Services Engine

Weakness Type

CWE-285

References