Vulnerability-Lookup

BDU:2026-15165 (CVE-2026-20234)

Vulnerability from fstec – Published: 2026-09-23 – Updated: 2026-09-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость платформы управления политиками соединений Cisco Identity Services Engine (ISE) и виртуального устройства сбора данных об аутентификации пользователей Cisco ISE Passive Identity Connector (ISE-PIC), связанная с недостаточной защитой регистрационных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Summary

Уязвимость платформы управления политиками соединений Cisco Identity Services Engine (ISE) и виртуального устройства сбора данных об аутентификации пользователей Cisco ISE Passive Identity Connector (ISE-PIC) связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации

Severity

9.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:S/C:C/I:C/A:C

9.9 (Critical) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Information gathering

Incidents

Being clarified

Remediation

Software update

CWE

CWE-522 - Недостаточная защита регистрационных данных

Aliases

CVE-2026-20234, CISCO-SA-HARDENING-ISE-XU5EWX5T

References

1 reference

URL
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/c…

Impacted products

2 products from 2 vendors

Vendors

Cisco Systems, Inc.

Products

Cisco Identity Services Engine, Identity Services Engine Passive Identity Connector (ISE-PIC)

Versions

2.0.1 (Cisco Identity Services Engine), 2.1.0 (Cisco Identity Services Engine), 2.2.1 (Cisco Identity Services Engine), 2.7.0 (Cisco Identity Services Engine), 2.7.0 P1 (Cisco Identity Services Engine), 2.7.0 P2 (Cisco Identity Services Engine), 2.7.0 P3 (Cisco Identity Services Engine), 2.7.0 P4 (Cisco Identity Services Engine), 2.7.0 P5 (Cisco Identity Services Engine), 2.7.0 P6 (Cisco Identity Services Engine), 2.7.0 P7 (Cisco Identity Services Engine), 2.7.0 P8 (Cisco Identity Services Engine), 2.7.0 P9 (Cisco Identity Services Engine), 3.0.0 (Cisco Identity Services Engine), 3.0.0 P1 (Cisco Identity Services Engine), 3.0.0 P2 (Cisco Identity Services Engine), 3.0.0 P3 (Cisco Identity Services Engine), 3.0.0 P4 (Cisco Identity Services Engine), 3.0.0 P5 (Cisco Identity Services Engine), 3.0.0 P6 (Cisco Identity Services Engine), 3.0.0 P7 (Cisco Identity Services Engine), 3.1.0 p8 (Cisco Identity Services Engine), 3.1.0 p9 (Cisco Identity Services Engine), 3.1.0 p10 (Cisco Identity Services Engine), 3.1.0 p11 (Cisco Identity Services Engine), 3.2.0 p7 (Cisco Identity Services Engine), 3.2 Patch 8 (Cisco Identity Services Engine), 3.2 Patch 9 (Cisco Identity Services Engine), 3.2 Patch 10 (Cisco Identity Services Engine), 3.3 Patch 2 (Cisco Identity Services Engine), 3.3 Patch 1 (Cisco Identity Services Engine), 3.3 Patch 3 (Cisco Identity Services Engine), 3.3 Patch 4 (Cisco Identity Services Engine), 3.3 Patch 5 (Cisco Identity Services Engine), 3.3 Patch 6 (Cisco Identity Services Engine), 3.3 Patch 7 (Cisco Identity Services Engine), 3.3 Patch 8 (Cisco Identity Services Engine), 3.3 Patch 9 (Cisco Identity Services Engine), 3.3 Patch 10 (Cisco Identity Services Engine), 3.3 Patch 11 (Cisco Identity Services Engine), 3.4.0 (Cisco Identity Services Engine), 3.4 Patch 1 (Cisco Identity Services Engine), 3.4 Patch 2 (Cisco Identity Services Engine), 3.4 Patch 3 (Cisco Identity Services Engine), 3.4 Patch 4 (Cisco Identity Services Engine), 3.4 Patch 5 (Cisco Identity Services Engine), 3.4 Patch 6 (Cisco Identity Services Engine), 3.5.0 (Cisco Identity Services Engine), 3.5 Patch 1 (Cisco Identity Services Engine), 3.5 Patch 2 (Cisco Identity Services Engine), 3.5 Patch 3 (Cisco Identity Services Engine), 3.4.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 3.1.0 (Cisco Identity Services Engine), 3.1.0 p1 (Cisco Identity Services Engine), 3.1.0 p3 (Cisco Identity Services Engine), 3.1.0 p2 (Cisco Identity Services Engine), 3.1.0 p4 (Cisco Identity Services Engine), 3.1.0 p5 (Cisco Identity Services Engine), 3.1.0 p6 (Cisco Identity Services Engine), 3.1.0 p7 (Cisco Identity Services Engine), 3.2.0 (Cisco Identity Services Engine), 3.2.0 p1 (Cisco Identity Services Engine), 3.2.0 p2 (Cisco Identity Services Engine), 3.2.0 p3 (Cisco Identity Services Engine), 3.2.0 p4 (Cisco Identity Services Engine), 3.2.0 p5 (Cisco Identity Services Engine), 3.2.0 p6 (Cisco Identity Services Engine), 3.3.0 (Cisco Identity Services Engine), 3.2.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 3.1.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 3.3.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 1.1.0 (Cisco Identity Services Engine), 1.1.1.268 Patch1 (Cisco Identity Services Engine), 1.1.1.268 Patch2 (Cisco Identity Services Engine), 1.1.1.268 Patch3 (Cisco Identity Services Engine), 1.1.1.268 Patch4 (Cisco Identity Services Engine), 1.1.1.268 Patch5 (Cisco Identity Services Engine), 1.1.1.268 Patch6 (Cisco Identity Services Engine), 1.1.2.145 Patch1 (Cisco Identity Services Engine), 1.1.2.145 Patch2 (Cisco Identity Services Engine), 1.1.2.145 Patch3 (Cisco Identity Services Engine), 1.1.2.145 Patch4 (Cisco Identity Services Engine), 1.1.2.145 Patch5 (Cisco Identity Services Engine), 1.1.2.145 Patch6 (Cisco Identity Services Engine), 1.1.2.145 Patch7 (Cisco Identity Services Engine), 1.1.2.145 Patch8 (Cisco Identity Services Engine), 1.1.2.145 Patch9 (Cisco Identity Services Engine), 1.1.3.124 Patch1 (Cisco Identity Services Engine), 1.1.3.124 Patch2 (Cisco Identity Services Engine), 1.1.3.124 Patch3 (Cisco Identity Services Engine), 1.1.3.124 Patch4 (Cisco Identity Services Engine), 1.1.3.124 Patch5 (Cisco Identity Services Engine), 1.1.3.124 Patch6 (Cisco Identity Services Engine), 1.1.3.124 Patch7 (Cisco Identity Services Engine), 1.1.4.218 Patch1 (Cisco Identity Services Engine), 1.1.4.218 Patch2 (Cisco Identity Services Engine), 1.1.4.218 Patch3 (Cisco Identity Services Engine), 1.1.4.218 Patch4 (Cisco Identity Services Engine), 1.1.4.218 Patch5 (Cisco Identity Services Engine), 1.1.4.218 Patch6 (Cisco Identity Services Engine), 1.1.4.218 Patch7 (Cisco Identity Services Engine), 1.1.4.218 Patch8 (Cisco Identity Services Engine), 1.1.4.218 Patch9 (Cisco Identity Services Engine), 1.1.4.218 Patch10 (Cisco Identity Services Engine), 1.1.4.218 Patch11 (Cisco Identity Services Engine), 1.1.4.218 Patch12 (Cisco Identity Services Engine), 1.1.4.218 Patch13 (Cisco Identity Services Engine), 1.1.3.124 Patch8 (Cisco Identity Services Engine), 1.1.3.124 Patch9 (Cisco Identity Services Engine), 1.1.3.124 Patch10 (Cisco Identity Services Engine), 1.1.3.124 Patch11 (Cisco Identity Services Engine), 1.1.3.124 Patch12 (Cisco Identity Services Engine), 1.1.3.124 Patch13 (Cisco Identity Services Engine), 1.1.2.145 Patch10 (Cisco Identity Services Engine), 1.1.1 (Cisco Identity Services Engine), 1.1.1.268 Patch7 (Cisco Identity Services Engine), 1.2.0 (Cisco Identity Services Engine), 1.2.1.198 Patch1 (Cisco Identity Services Engine), 1.2.1.198 Patch2 (Cisco Identity Services Engine), 1.2.0.899 Patch14 (Cisco Identity Services Engine), 1.2.0.899 Patch6 (Cisco Identity Services Engine), 1.2.0.899 Patch5 (Cisco Identity Services Engine), 1.2.0.899 Patch4 (Cisco Identity Services Engine), 1.2.0.899 Patch3 (Cisco Identity Services Engine), 1.2.0.899 Patch2 (Cisco Identity Services Engine), 1.2.0.899 Patch1 (Cisco Identity Services Engine), 1.2.0.899 Patch7 (Cisco Identity Services Engine), 1.2.0.899 Patch8 (Cisco Identity Services Engine), 1.2.0.899 Patch9 (Cisco Identity Services Engine), 1.2.0.899 Patch10 (Cisco Identity Services Engine), 1.2.0.899 Patch11 (Cisco Identity Services Engine), 1.2.0.899 Patch12 (Cisco Identity Services Engine), 1.2.0.899 Patch13 (Cisco Identity Services Engine), 1.2.1.198 Patch3 (Cisco Identity Services Engine), 1.2.1.198 Patch4 (Cisco Identity Services Engine), 1.2.1.198 Patch5 (Cisco Identity Services Engine), 1.2.1.198 Patch6 (Cisco Identity Services Engine), 1.2.1.198 Patch7 (Cisco Identity Services Engine), 1.2.1.198 Patch8 (Cisco Identity Services Engine), 1.3.0 (Cisco Identity Services Engine), 1.3.0.876 Patch5 (Cisco Identity Services Engine), 1.3.0.876 Patch6 (Cisco Identity Services Engine), 1.3.0.876 Patch7 (Cisco Identity Services Engine), 1.3.0.876 Patch8 (Cisco Identity Services Engine), 1.3.0.876 Patch1 (Cisco Identity Services Engine), 1.3.0.876 Patch2 (Cisco Identity Services Engine), 1.3.0.876 Patch3 (Cisco Identity Services Engine), 1.3.0.876 Patch4 (Cisco Identity Services Engine), 1.4.0 (Cisco Identity Services Engine), 1.4.0.253 Patch3 (Cisco Identity Services Engine), 1.4.0.253 Patch5 (Cisco Identity Services Engine), 1.4.0.253 Patch6 (Cisco Identity Services Engine), 1.4.0.253 Patch7 (Cisco Identity Services Engine), 1.4.0.253 Patch8 (Cisco Identity Services Engine), 1.4.0.253 Patch9 (Cisco Identity Services Engine), 1.4.0.253 Patch10 (Cisco Identity Services Engine), 1.4.0.253 Patch11 (Cisco Identity Services Engine), 1.4.0.253 Patch12 (Cisco Identity Services Engine), 2.0.1.130 Patch1 (Cisco Identity Services Engine), 2.0.1.130 Patch2 (Cisco Identity Services Engine), 2.0.1.130 Patch3 (Cisco Identity Services Engine), 2.0.1.130 Patch4 (Cisco Identity Services Engine), 2.0.1.130 Patch5 (Cisco Identity Services Engine), 2.0.1.130 Patch6 (Cisco Identity Services Engine), 2.0.1.130 Patch7 (Cisco Identity Services Engine), 2.0.0.306 Patch2 (Cisco Identity Services Engine), 2.0.0.306 Patch3 (Cisco Identity Services Engine), 2.0.0.306 Patch4 (Cisco Identity Services Engine), 2.0.0.306 Patch5 (Cisco Identity Services Engine), 2.0.0.306 Patch6 (Cisco Identity Services Engine), 2.0.0.306 Patch7 (Cisco Identity Services Engine), 2.0.0.306 Patch1 (Cisco Identity Services Engine), 2.1.0.474 Patch1 (Cisco Identity Services Engine), 2.1.0.474 Patch2 (Cisco Identity Services Engine), 2.1.0.474 Patch3 (Cisco Identity Services Engine), 2.1.0.474 Patch5 (Cisco Identity Services Engine), 2.1.0.474 Patch6 (Cisco Identity Services Engine), 2.1.0.474 Patch7 (Cisco Identity Services Engine), 2.1.0.474 Patch4 (Cisco Identity Services Engine), 2.2.0.470 Patch2 (Cisco Identity Services Engine), 2.2.0.470 Patch3 (Cisco Identity Services Engine), 2.2.0.470 Patch4 (Cisco Identity Services Engine), 2.2.0.470 Patch5 (Cisco Identity Services Engine), 2.2.0.470 Patch6 (Cisco Identity Services Engine), 2.2.0.470 Patch7 (Cisco Identity Services Engine), 2.2.0.470 Patch1 (Cisco Identity Services Engine), 2.2.0.470 Patch8 (Cisco Identity Services Engine), 2.2.0.470 Patch9 (Cisco Identity Services Engine), 2.2.0.470 Patch10 (Cisco Identity Services Engine), 2.2.0 (Cisco Identity Services Engine), 2.2.0 p1 (Cisco Identity Services Engine), 2.2.0 p10 (Cisco Identity Services Engine), 2.2.0 p11 (Cisco Identity Services Engine), 2.2.0 p12 (Cisco Identity Services Engine), 2.2.0 p13 (Cisco Identity Services Engine), 2.2.0 p14 (Cisco Identity Services Engine), 2.2.0 p15 (Cisco Identity Services Engine), 2.2.0 p16 (Cisco Identity Services Engine), 2.2.0 p2 (Cisco Identity Services Engine), 2.2.0 p3 (Cisco Identity Services Engine), 2.2.0 p4 (Cisco Identity Services Engine), 2.2.0 p5 (Cisco Identity Services Engine), 2.2.0 p6 (Cisco Identity Services Engine), 2.2.0 p7 (Cisco Identity Services Engine), 2.2.0 p8 (Cisco Identity Services Engine), 2.2.0 p9 (Cisco Identity Services Engine), 2.2.1 p10 (Cisco Identity Services Engine), 2.2.0 p17 (Cisco Identity Services Engine), 2.3.0 (Cisco Identity Services Engine), 2.3.0.298 Patch1 (Cisco Identity Services Engine), 2.3.0.298 Patch2 (Cisco Identity Services Engine), 2.3.0.298 Patch3 (Cisco Identity Services Engine), 2.3.0.298 Patch4 (Cisco Identity Services Engine), 2.3.0.298 Patch5 (Cisco Identity Services Engine), 2.4.0 (Cisco Identity Services Engine), 2.4.0.357 Patch1 (Cisco Identity Services Engine), 2.4.0.357 Patch2 (Cisco Identity Services Engine), 2.4.0.357 Patch3 (Cisco Identity Services Engine), 2.4.0.357 Patch5 (Cisco Identity Services Engine), 2.4.0 p1 (Cisco Identity Services Engine), 2.4.0 p10 (Cisco Identity Services Engine), 2.4.0 p11 (Cisco Identity Services Engine), 2.4.0 p12 (Cisco Identity Services Engine), 2.4.0 p2 (Cisco Identity Services Engine), 2.4.0 p3 (Cisco Identity Services Engine), 2.4.0 p5 (Cisco Identity Services Engine), 2.4.0 p6 (Cisco Identity Services Engine), 2.4.0 p7 (Cisco Identity Services Engine), 2.4.0 p8 (Cisco Identity Services Engine), 2.4.0 p9 (Cisco Identity Services Engine), 2.4.0 p13 (Cisco Identity Services Engine), 2.4.0 p14 (Cisco Identity Services Engine), 2.4.0 p4 (Cisco Identity Services Engine), 2.6.0 (Cisco Identity Services Engine), 2.6.0 p1 (Cisco Identity Services Engine), 2.6.0 p2 (Cisco Identity Services Engine), 2.6.0 p3 (Cisco Identity Services Engine), 2.6.0 p5 (Cisco Identity Services Engine), 2.6.0 p6 (Cisco Identity Services Engine), 2.6.0 p7 (Cisco Identity Services Engine), 2.6.0 p8 (Cisco Identity Services Engine), 2.6.0 p9 (Cisco Identity Services Engine), 2.6.0 p10 (Cisco Identity Services Engine), 2.6.0 p11 (Cisco Identity Services Engine), 2.6.0 p12 (Cisco Identity Services Engine), 2.7.0 p10 (Cisco Identity Services Engine), 3.0.0 p8 (Cisco Identity Services Engine), 3.3.0 p1 (Cisco Identity Services Engine), 3.0.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))

Product types

Network appliance software, Virtualization software

Mitigations

Использование рекомендаций производителя: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "2.0.1 (Cisco Identity Services Engine), 2.1.0 (Cisco Identity Services Engine), 2.2.1 (Cisco Identity Services Engine), 2.7.0 (Cisco Identity Services Engine), 2.7.0 P1 (Cisco Identity Services Engine), 2.7.0 P2 (Cisco Identity Services Engine), 2.7.0 P3 (Cisco Identity Services Engine), 2.7.0 P4 (Cisco Identity Services Engine), 2.7.0 P5 (Cisco Identity Services Engine), 2.7.0 P6 (Cisco Identity Services Engine), 2.7.0 P7 (Cisco Identity Services Engine), 2.7.0 P8 (Cisco Identity Services Engine), 2.7.0 P9 (Cisco Identity Services Engine), 3.0.0 (Cisco Identity Services Engine), 3.0.0 P1 (Cisco Identity Services Engine), 3.0.0 P2 (Cisco Identity Services Engine), 3.0.0 P3 (Cisco Identity Services Engine), 3.0.0 P4 (Cisco Identity Services Engine), 3.0.0 P5 (Cisco Identity Services Engine), 3.0.0 P6 (Cisco Identity Services Engine), 3.0.0 P7 (Cisco Identity Services Engine), 3.1.0 p8 (Cisco Identity Services Engine), 3.1.0 p9 (Cisco Identity Services Engine), 3.1.0 p10 (Cisco Identity Services Engine), 3.1.0 p11 (Cisco Identity Services Engine), 3.2.0 p7 (Cisco Identity Services Engine), 3.2 Patch 8 (Cisco Identity Services Engine), 3.2 Patch 9 (Cisco Identity Services Engine), 3.2 Patch 10 (Cisco Identity Services Engine), 3.3 Patch 2 (Cisco Identity Services Engine), 3.3 Patch 1 (Cisco Identity Services Engine), 3.3 Patch 3 (Cisco Identity Services Engine), 3.3 Patch 4 (Cisco Identity Services Engine), 3.3 Patch 5 (Cisco Identity Services Engine), 3.3 Patch 6 (Cisco Identity Services Engine), 3.3 Patch 7 (Cisco Identity Services Engine), 3.3 Patch 8 (Cisco Identity Services Engine), 3.3 Patch 9 (Cisco Identity Services Engine), 3.3 Patch 10 (Cisco Identity Services Engine), 3.3 Patch 11 (Cisco Identity Services Engine), 3.4.0 (Cisco Identity Services Engine), 3.4 Patch 1 (Cisco Identity Services Engine), 3.4 Patch 2 (Cisco Identity Services Engine), 3.4 Patch 3 (Cisco Identity Services Engine), 3.4 Patch 4 (Cisco Identity Services Engine), 3.4 Patch 5 (Cisco Identity Services Engine), 3.4 Patch 6 (Cisco Identity Services Engine), 3.5.0 (Cisco Identity Services Engine), 3.5 Patch 1 (Cisco Identity Services Engine), 3.5 Patch 2 (Cisco Identity Services Engine), 3.5 Patch 3 (Cisco Identity Services Engine), 3.4.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 3.1.0 (Cisco Identity Services Engine), 3.1.0 p1 (Cisco Identity Services Engine), 3.1.0 p3 (Cisco Identity Services Engine), 3.1.0 p2 (Cisco Identity Services Engine), 3.1.0 p4 (Cisco Identity Services Engine), 3.1.0 p5 (Cisco Identity Services Engine), 3.1.0 p6 (Cisco Identity Services Engine), 3.1.0 p7 (Cisco Identity Services Engine), 3.2.0 (Cisco Identity Services Engine), 3.2.0 p1 (Cisco Identity Services Engine), 3.2.0 p2 (Cisco Identity Services Engine), 3.2.0 p3 (Cisco Identity Services Engine), 3.2.0 p4 (Cisco Identity Services Engine), 3.2.0 p5 (Cisco Identity Services Engine), 3.2.0 p6 (Cisco Identity Services Engine), 3.3.0 (Cisco Identity Services Engine), 3.2.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 3.1.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 3.3.0 (Identity Services Engine Passive Identity Connector (ISE-PIC)), 1.1.0 (Cisco Identity Services Engine), 1.1.1.268 Patch1 (Cisco Identity Services Engine), 1.1.1.268 Patch2 (Cisco Identity Services Engine), 1.1.1.268 Patch3 (Cisco Identity Services Engine), 1.1.1.268 Patch4 (Cisco Identity Services Engine), 1.1.1.268 Patch5 (Cisco Identity Services Engine), 1.1.1.268 Patch6 (Cisco Identity Services Engine), 1.1.2.145 Patch1 (Cisco Identity Services Engine), 1.1.2.145 Patch2 (Cisco Identity Services Engine), 1.1.2.145 Patch3 (Cisco Identity Services Engine), 1.1.2.145 Patch4 (Cisco Identity Services Engine), 1.1.2.145 Patch5 (Cisco Identity Services Engine), 1.1.2.145 Patch6 (Cisco Identity Services Engine), 1.1.2.145 Patch7 (Cisco Identity Services Engine), 1.1.2.145 Patch8 (Cisco Identity Services Engine), 1.1.2.145 Patch9 (Cisco Identity Services Engine), 1.1.3.124 Patch1 (Cisco Identity Services Engine), 1.1.3.124 Patch2 (Cisco Identity Services Engine), 1.1.3.124 Patch3 (Cisco Identity Services Engine), 1.1.3.124 Patch4 (Cisco Identity Services Engine), 1.1.3.124 Patch5 (Cisco Identity Services Engine), 1.1.3.124 Patch6 (Cisco Identity Services Engine), 1.1.3.124 Patch7 (Cisco Identity Services Engine), 1.1.4.218 Patch1 (Cisco Identity Services Engine), 1.1.4.218 Patch2 (Cisco Identity Services Engine), 1.1.4.218 Patch3 (Cisco Identity Services Engine), 1.1.4.218 Patch4 (Cisco Identity Services Engine), 1.1.4.218 Patch5 (Cisco Identity Services Engine), 1.1.4.218 Patch6 (Cisco Identity Services Engine), 1.1.4.218 Patch7 (Cisco Identity Services Engine), 1.1.4.218 Patch8 (Cisco Identity Services Engine), 1.1.4.218 Patch9 (Cisco Identity Services Engine), 1.1.4.218 Patch10 (Cisco Identity Services Engine), 1.1.4.218 Patch11 (Cisco Identity Services Engine), 1.1.4.218 Patch12 (Cisco Identity Services Engine), 1.1.4.218 Patch13 (Cisco Identity Services Engine), 1.1.3.124 Patch8 (Cisco Identity Services Engine), 1.1.3.124 Patch9 (Cisco Identity Services Engine), 1.1.3.124 Patch10 (Cisco Identity Services Engine), 1.1.3.124 Patch11 (Cisco Identity Services Engine), 1.1.3.124 Patch12 (Cisco Identity Services Engine), 1.1.3.124 Patch13 (Cisco Identity Services Engine), 1.1.2.145 Patch10 (Cisco Identity Services Engine), 1.1.1 (Cisco Identity Services Engine), 1.1.1.268 Patch7 (Cisco Identity Services Engine), 1.2.0 (Cisco Identity Services Engine), 1.2.1.198 Patch1 (Cisco Identity Services Engine), 1.2.1.198 Patch2 (Cisco Identity Services Engine), 1.2.0.899 Patch14 (Cisco Identity Services Engine), 1.2.0.899 Patch6 (Cisco Identity Services Engine), 1.2.0.899 Patch5 (Cisco Identity Services Engine), 1.2.0.899 Patch4 (Cisco Identity Services Engine), 1.2.0.899 Patch3 (Cisco Identity Services Engine), 1.2.0.899 Patch2 (Cisco Identity Services Engine), 1.2.0.899 Patch1 (Cisco Identity Services Engine), 1.2.0.899 Patch7 (Cisco Identity Services Engine), 1.2.0.899 Patch8 (Cisco Identity Services Engine), 1.2.0.899 Patch9 (Cisco Identity Services Engine), 1.2.0.899 Patch10 (Cisco Identity Services Engine), 1.2.0.899 Patch11 (Cisco Identity Services Engine), 1.2.0.899 Patch12 (Cisco Identity Services Engine), 1.2.0.899 Patch13 (Cisco Identity Services Engine), 1.2.1.198 Patch3 (Cisco Identity Services Engine), 1.2.1.198 Patch4 (Cisco Identity Services Engine), 1.2.1.198 Patch5 (Cisco Identity Services Engine), 1.2.1.198 Patch6 (Cisco Identity Services Engine), 1.2.1.198 Patch7 (Cisco Identity Services Engine), 1.2.1.198 Patch8 (Cisco Identity Services Engine), 1.3.0 (Cisco Identity Services Engine), 1.3.0.876 Patch5 (Cisco Identity Services Engine), 1.3.0.876 Patch6 (Cisco Identity Services Engine), 1.3.0.876 Patch7 (Cisco Identity Services Engine), 1.3.0.876 Patch8 (Cisco Identity Services Engine), 1.3.0.876 Patch1 (Cisco Identity Services Engine), 1.3.0.876 Patch2 (Cisco Identity Services Engine), 1.3.0.876 Patch3 (Cisco Identity Services Engine), 1.3.0.876 Patch4 (Cisco Identity Services Engine), 1.4.0 (Cisco Identity Services Engine), 1.4.0.253 Patch3 (Cisco Identity Services Engine), 1.4.0.253 Patch5 (Cisco Identity Services Engine), 1.4.0.253 Patch6 (Cisco Identity Services Engine), 1.4.0.253 Patch7 (Cisco Identity Services Engine), 1.4.0.253 Patch8 (Cisco Identity Services Engine), 1.4.0.253 Patch9 (Cisco Identity Services Engine), 1.4.0.253 Patch10 (Cisco Identity Services Engine), 1.4.0.253 Patch11 (Cisco Identity Services Engine), 1.4.0.253 Patch12 (Cisco Identity Services Engine), 2.0.1.130 Patch1 (Cisco Identity Services Engine), 2.0.1.130 Patch2 (Cisco Identity Services Engine), 2.0.1.130 Patch3 (Cisco Identity Services Engine), 2.0.1.130 Patch4 (Cisco Identity Services Engine), 2.0.1.130 Patch5 (Cisco Identity Services Engine), 2.0.1.130 Patch6 (Cisco Identity Services Engine), 2.0.1.130 Patch7 (Cisco Identity Services Engine), 2.0.0.306 Patch2 (Cisco Identity Services Engine), 2.0.0.306 Patch3 (Cisco Identity Services Engine), 2.0.0.306 Patch4 (Cisco Identity Services Engine), 2.0.0.306 Patch5 (Cisco Identity Services Engine), 2.0.0.306 Patch6 (Cisco Identity Services Engine), 2.0.0.306 Patch7 (Cisco Identity Services Engine), 2.0.0.306 Patch1 (Cisco Identity Services Engine), 2.1.0.474 Patch1 (Cisco Identity Services Engine), 2.1.0.474 Patch2 (Cisco Identity Services Engine), 2.1.0.474 Patch3 (Cisco Identity Services Engine), 2.1.0.474 Patch5 (Cisco Identity Services Engine), 2.1.0.474 Patch6 (Cisco Identity Services Engine), 2.1.0.474 Patch7 (Cisco Identity Services Engine), 2.1.0.474 Patch4 (Cisco Identity Services Engine), 2.2.0.470 Patch2 (Cisco Identity Services Engine), 2.2.0.470 Patch3 (Cisco Identity Services Engine), 2.2.0.470 Patch4 (Cisco Identity Services Engine), 2.2.0.470 Patch5 (Cisco Identity Services Engine), 2.2.0.470 Patch6 (Cisco Identity Services Engine), 2.2.0.470 Patch7 (Cisco Identity Services Engine), 2.2.0.470 Patch1 (Cisco Identity Services Engine), 2.2.0.470 Patch8 (Cisco Identity Services Engine), 2.2.0.470 Patch9 (Cisco Identity Services Engine), 2.2.0.470 Patch10 (Cisco Identity Services Engine), 2.2.0 (Cisco Identity Services Engine), 2.2.0 p1 (Cisco Identity Services Engine), 2.2.0 p10 (Cisco Identity Services Engine), 2.2.0 p11 (Cisco Identity Services Engine), 2.2.0 p12 (Cisco Identity Services Engine), 2.2.0 p13 (Cisco Identity Services Engine), 2.2.0 p14 (Cisco Identity Services Engine), 2.2.0 p15 (Cisco Identity Services Engine), 2.2.0 p16 (Cisco Identity Services Engine), 2.2.0 p2 (Cisco Identity Services Engine), 2.2.0 p3 (Cisco Identity Services Engine), 2.2.0 p4 (Cisco Identity Services Engine), 2.2.0 p5 (Cisco Identity Services Engine), 2.2.0 p6 (Cisco Identity Services Engine), 2.2.0 p7 (Cisco Identity Services Engine), 2.2.0 p8 (Cisco Identity Services Engine), 2.2.0 p9 (Cisco Identity Services Engine), 2.2.1 p10 (Cisco Identity Services Engine), 2.2.0 p17 (Cisco Identity Services Engine), 2.3.0 (Cisco Identity Services Engine), 2.3.0.298 Patch1 (Cisco Identity Services Engine), 2.3.0.298 Patch2 (Cisco Identity Services Engine), 2.3.0.298 Patch3 (Cisco Identity Services Engine), 2.3.0.298 Patch4 (Cisco Identity Services Engine), 2.3.0.298 Patch5 (Cisco Identity Services Engine), 2.4.0 (Cisco Identity Services Engine), 2.4.0.357 Patch1 (Cisco Identity Services Engine), 2.4.0.357 Patch2 (Cisco Identity Services Engine), 2.4.0.357 Patch3 (Cisco Identity Services Engine), 2.4.0.357 Patch5 (Cisco Identity Services Engine), 2.4.0 p1 (Cisco Identity Services Engine), 2.4.0 p10 (Cisco Identity Services Engine), 2.4.0 p11 (Cisco Identity Services Engine), 2.4.0 p12 (Cisco Identity Services Engine), 2.4.0 p2 (Cisco Identity Services Engine), 2.4.0 p3 (Cisco Identity Services Engine), 2.4.0 p5 (Cisco Identity Services Engine), 2.4.0 p6 (Cisco Identity Services Engine), 2.4.0 p7 (Cisco Identity Services Engine), 2.4.0 p8 (Cisco Identity Services Engine), 2.4.0 p9 (Cisco Identity Services Engine), 2.4.0 p13 (Cisco Identity Services Engine), 2.4.0 p14 (Cisco Identity Services Engine), 2.4.0 p4 (Cisco Identity Services Engine), 2.6.0 (Cisco Identity Services Engine), 2.6.0 p1 (Cisco Identity Services Engine), 2.6.0 p2 (Cisco Identity Services Engine), 2.6.0 p3 (Cisco Identity Services Engine), 2.6.0 p5 (Cisco Identity Services Engine), 2.6.0 p6 (Cisco Identity Services Engine), 2.6.0 p7 (Cisco Identity Services Engine), 2.6.0 p8 (Cisco Identity Services Engine), 2.6.0 p9 (Cisco Identity Services Engine), 2.6.0 p10 (Cisco Identity Services Engine), 2.6.0 p11 (Cisco Identity Services Engine), 2.6.0 p12 (Cisco Identity Services Engine), 2.7.0 p10 (Cisco Identity Services Engine), 3.0.0 p8 (Cisco Identity Services Engine), 3.3.0 p1 (Cisco Identity Services Engine), 3.0.0 (Identity Services Engine Passive Identity Connector (ISE-PIC))",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.09.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.09.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.09.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-15165",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-20234, CISCO-SA-hardening-ise-XU5EwX5T",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco Identity Services Engine, Identity Services Engine Passive Identity Connector (ISE-PIC)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Cisco Identity Services Engine (ISE) \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cisco ISE Passive Identity Connector (ISE-PIC), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-522)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 Cisco Identity Services Engine (ISE) \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cisco ISE Passive Identity Connector (ISE-PIC) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-522",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,9)"
}

CISCO-SA-HARDENING-ISE-XU5EWX5T

Vulnerability from csaf_cisco - Published: 2026-09-16 16:00 - Updated: 2026-09-16 16:00

Summary

Cisco Identity Services Engine Hardening Release: September 2026

Scope

6 vulnerabilities in this advisory.

Open the full advisory

CVE-2026-20234 (GCVE-0-2026-20234)

Vulnerability from cvelistv5 – Published: 2026-09-16 16:56 – Updated: 2026-09-17 11:39

Title

Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities

Summary

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20234 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-17 03:57 UTC

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

cisco mitre root Scorecard

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

2 products

Vendor	Product	Version
Cisco	Cisco Identity Services Engine Software	Affected: 3.1.0 Affected: 3.1.0 p1 Affected: 3.1.0 p3 Affected: 3.1.0 p2 Affected: 3.2.0 Affected: 3.1.0 p4 Affected: 3.1.0 p5 Affected: 3.2.0 p1 Affected: 3.1.0 p6 Affected: 3.2.0 p2 Affected: 3.1.0 p7 Affected: 3.3.0 Affected: 3.2.0 p3 Affected: 3.2.0 p4 Affected: 3.1.0 p8 Affected: 3.2.0 p5 Affected: 3.2.0 p6 Affected: 3.1.0 p9 Affected: 3.3 Patch 2 Affected: 3.3 Patch 1 Affected: 3.3 Patch 3 Affected: 3.4.0 Affected: 3.2.0 p7 Affected: 3.3 Patch 4 Affected: 3.4 Patch 1 Affected: 3.1.0 p10 Affected: 3.3 Patch 5 Affected: 3.3 Patch 6 Affected: 3.4 Patch 2 Affected: 3.3 Patch 7 Affected: 3.4 Patch 3 Affected: 3.5.0 Affected: 3.4 Patch 4 Affected: 3.3 Patch 8 Affected: 3.2 Patch 8 Affected: 3.5 Patch 1 Affected: 3.3 Patch 9 Affected: 3.2 Patch 9 Affected: 3.4 Patch 5 Affected: 3.5 Patch 3 Affected: 3.5 Patch 2 Affected: 3.3 Patch 10 Affected: 3.3 Patch 11 Affected: 3.4 Patch 6 Affected: 3.2 Patch 10 Affected: 3.1.0 p72 Affected: 3.1.0 p11
Cisco	Cisco ISE Passive Identity Connector	Affected: 3.2.0 Affected: 3.1.0 Affected: 3.3.0 Affected: 3.4.0 Affected: 3.5.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-20234",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T03:57:25.366451Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T11:39:24.514Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Identity Services Engine Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p3"
            },
            {
              "status": "affected",
              "version": "3.1.0 p2"
            },
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.1.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p6"
            },
            {
              "status": "affected",
              "version": "3.2.0 p2"
            },
            {
              "status": "affected",
              "version": "3.1.0 p7"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p3"
            },
            {
              "status": "affected",
              "version": "3.2.0 p4"
            },
            {
              "status": "affected",
              "version": "3.1.0 p8"
            },
            {
              "status": "affected",
              "version": "3.2.0 p5"
            },
            {
              "status": "affected",
              "version": "3.2.0 p6"
            },
            {
              "status": "affected",
              "version": "3.1.0 p9"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.2.0 p7"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.1.0 p10"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 6"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 7"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 4"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 8"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 8"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 1"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 9"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 9"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 5"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 3"
            },
            {
              "status": "affected",
              "version": "3.5 Patch 2"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 10"
            },
            {
              "status": "affected",
              "version": "3.3 Patch 11"
            },
            {
              "status": "affected",
              "version": "3.4 Patch 6"
            },
            {
              "status": "affected",
              "version": "3.2 Patch 10"
            },
            {
              "status": "affected",
              "version": "3.1.0 p72"
            },
            {
              "status": "affected",
              "version": "3.1.0 p11"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco ISE Passive Identity Connector",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0"
            },
            {
              "status": "affected",
              "version": "3.1.0"
            },
            {
              "status": "affected",
              "version": "3.3.0"
            },
            {
              "status": "affected",
              "version": "3.4.0"
            },
            {
              "status": "affected",
              "version": "3.5.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20234 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "Insufficiently Protected Credentials",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T20:06:42.813Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-hardening-ise-XU5EwX5T",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T"
        }
      ],
      "source": {
        "advisory": "cisco-sa-hardening-ise-XU5EwX5T",
        "defects": [
          "CSCwu27787"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-20234",
    "datePublished": "2026-09-16T16:56:18.365Z",
    "dateReserved": "2025-10-08T11:59:15.399Z",
    "dateUpdated": "2026-09-17T11:39:24.514Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2026-15165 (CVE-2026-20234)

CISCO-SA-HARDENING-ISE-XU5EWX5T

CVE-2026-20234 (GCVE-0-2026-20234)

Tags

Sightings

Nomenclature

Related by attack behaviour