CVE-2026-20072 is a medium-severity vulnerability in Cisco Identity Services Engine (ISE) web management interface. It arises from insufficient authorization checks on files that can be accessed by authenticated administrators. An attacker with administrative and management rights can exploit this flaw to export user information from security groups they do not belong to, potentially exposing sensitive passwords that are not normally visible to administrators.

An attacker with valid administrative credentials on Cisco ISE can obtain sensitive information, including passwords of network users outside their security group. This could lead to unauthorized disclosure of credentials and compromise of user accounts or network access controls. The vulnerability does not affect confidentiality beyond information disclosure, and does not impact integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted personnel only and monitor for unusual export activity. Review Cisco advisories regularly for updates on patches or mitigations.