CVE-2026-20235 is a medium severity vulnerability in the API of Cisco Identity Services Engine (ISE) that allows an authenticated remote attacker with administrative credentials to view sensitive information. The issue arises from insufficient validation of user-supplied parameters in API requests, enabling crafted requests to access sensitive data such as hashed credentials.