Known Exploited Vulnerabilities July 28, 2025 · CISA KEV Catalog

CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerability

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2025-20281Cisco

Related

CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026

CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026

CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026