Threats tagged 'ghsa-9jpc-f2m6-gmpp'

CVE-2026-20284 is a critical SQL injection vulnerability in the SXP REST API of Cisco Identity Services Engine (ISE). It requires an attacker to have valid administrative credentials, the SXP service enabled, and at least one SXP connection configured. Exploitation could allow the attacker to view or modify the underlying database and cause denial of service in single-node deployments.