CVE-2026-20309 is a reflected XSS vulnerability in Cisco Identity Services Engine's web-based management interface. The interface fails to properly validate user input, enabling an unauthenticated attacker to craft a malicious link that, when clicked by a user, executes arbitrary script code within the user's browser context. This can lead to unauthorized access to sensitive information accessible via the browser session. The vulnerability is rated medium severity with a CVSS 3.1 base score of 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). No specific affected versions or patches are provided in the available data.

Successful exploitation allows an unauthenticated remote attacker to perform reflected XSS attacks against users of the Cisco ISE management interface. This can result in execution of arbitrary script code in the victim's browser context and potential access to sensitive browser-based information. There is no indication of impact on system availability or integrity beyond the browser context. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when clicking links related to the Cisco ISE management interface and consider restricting access to the interface to trusted users only. Monitor Cisco's security advisories for updates and patches addressing this vulnerability.