CVE-2026-20286 is a medium severity vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE). It allows an authenticated remote attacker with valid Administrator credentials to modify parts of the device configuration due to insufficient server-side validation of Administrator permissions. Exploitation requires submitting a crafted HTTP request. There is no indication of a public exploit or cloud service involvement. No patch or remediation details are provided.