Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release
Summary: Cisco released updates for a medium-severity flaw in Identity Services Engine and ISE Passive Identity Connector, tracked as CVE-2026-20029 with a CVSS score of 4.9, stemming from improper parsing of XML processed by the web-based management interface. An authenticated, remote attacker with administrative privileges could upload a malicious file to read arbitrary files from the underlying operating system, and Cisco said a public proof-of-concept exploit exists with no workarounds available and no indications of exploitation in the wild.
Key Takeaway: The flaw lets someone who already holds valid admin credentials read files Cisco says should be off-limits even to administrators, so the boundary your privileged accounts are supposed to respect is the one that fails here.
Read the original at The Hacker News ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2026-20029
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026