Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

Summary: Cisco released patches for four critical flaws in Identity Services and Webex Services, three of them tracked as CVE-2026-20147, CVE-2026-20180, and CVE-2026-20186, which Cisco said could let an attacker gain user-level access to the underlying operating system and then elevate to root. Cisco said it is not aware of any of these flaws being exploited in the wild, and noted that CVE-2026-20184 is cloud-based and needs no customer action, though SSO users are advised to upload a new IdP SAML certificate to Control Hub.
What's compelling: Cisco's own advisory states that in single-node ISE deployments a successful exploit could take the node offline, leaving endpoints that have not yet authenticated unable to reach the network until it is restored.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-20147 CVE-2026-20180 CVE-2026-20184 CVE-2026-20186
Related: ⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026