Vulnerability · Published Jun 17, 2026 · Assigned by cisco
CVE-2026-20190Cisco Identity Services Engine Information Disclosure Vulnerability
High 7.5
In plain English
A high-severity security flaw in Cisco Identity Services Engine Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Official description
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Identity Services Engine Software | 3.4.03.4 Patch 13.4 Patch 23.4 Patch 33.5.03.4 Patch 43.5 Patch 13.4 Patch 5 |
| Cisco | Cisco ISE Passive Identity Connector | 3.4.0 |
Weakness: CWE-285 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N