Threats tagged 'ghsa-6q33-6xqh-fh6f'

CVE-2026-20283 is a vulnerability in the IPsec Open API endpoint of Cisco ISE that allows an authenticated remote attacker with administrative credentials to inject arbitrary commands on the underlying operating system. Exploitation requires the node to have multiple network interfaces with at least one active IPsec tunnel. Cisco rates the security impact as high due to the ease of privilege escalation to root from the initial access level. The CVSS v3.1 base score is 6.5 (medium severity). No patch or remediation details are provided in the available data.