Threats tagged 'ghsa-pfwv-v5q9-qwh6'

CVE-2026-20282 is a vulnerability in Cisco Identity Services Engine (ISE) that allows an authenticated remote attacker with administrative credentials to gain write access to the underlying operating system by sending a crafted HTTP request. The vulnerability arises from insufficient validation of user-supplied input. Cisco rates the security impact as high because the attacker can easily escalate privileges to root from the obtained access. The CVSS score is 4.9 (medium severity).