Cisco ISE Vulnerability Let Remote attacker Access Sensitive Data

Cybersecuritynews •Guru Baran • January 8, 2026

Cisco has patched a critical flaw in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that lets authenticated administrators snoop on sensitive server files. Dubbed CVE-2026-20029, the vulnerability stems from a flaw in XML parsing in the web management interface and is assigned a CVSS score yet to be finalized, but is […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco ISE Vulnerability Exposes Sensitive Data to Remote Attackers Cisco has addressed a critical vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that allowed authenticated administrators to access sensitive server files. The vulnerability, identified as CVE-2026-20029, is due to a flaw in XML parsing within the web management interface, with a CVSS score yet to be finalized. 3 sources 33

Extracted Entities

Cisco ISE Vulnerability Let Remote attacker Access Sensitive Data

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)