Threats tagged 'ghsa-8434-fc8m-pj97'

CVE-2026-20211 is a critical vulnerability in Cisco Identity Services Engine (ISE) that allows an authenticated attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying operating system. The flaw arises from insecure deserialization of Java objects. Exploitation involves sending a crafted serialized Java object to the affected device, potentially leading to user-level access and privilege escalation to root. In single-node deployments, exploitation can cause a denial-of-service condition by making the node unavailable, disrupting network access for unauthenticated endpoints.