Search: CVE-2026-20181

CVE-2026-20181 is a critical vulnerability in Cisco Identity Services Engine (ISE) software versions 3.1.0 through 3.5.0. It allows an authenticated attacker with administrative credentials to execute arbitrary commands on the underlying operating system by exploiting insufficient validation of user-supplied input via crafted HTTP requests. Successful exploitation can lead to privilege escalation to root and, in single-node deployments, cause denial of service by making the ISE node unavailable, disrupting network access for unauthenticated endpoints.