CVE-2026-20283: Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities

1 karet z 1 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-20283

EPSS 0.01 EPSS k 31. 10. 2026

Hodnocení závažnosti

6.5 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy nutná práva správce bez zásahu uživatele
dopad plný únik dat úplná změna dat bez výpadku
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct SQL injections, modify data, or execute arbitrary commands on the underlying operating system on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: For CVE-2026-20282 and CVE-2026-20283, Cisco has assigned a Security Impact Rating (SIR) of High rather than Medium as the scores indicate. The reason is that it…

EPSS 0.01 CVE-2026-20282 CVE-2026-20283 CVE-2026-20284 Cisco US

tg: zranitelnost

· Cisco PSIRT · Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities