Critical Cisco ISE Flaws Let Remote Attackers Execute Malicious Code

Networking giant Cisco has issued an urgent security advisory warning of two newly discovered vulnerabilities impacting its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC).

Cisco Identity Services Engine (ISE) is a widely deployed security policy management platform that provides secure access to enterprise network resources.

The most severe of these new flaws could allow an authenticated, remote attacker to achieve full remote code execution (RCE) and compromise affected infrastructure.

According to the official Cisco advisory published on April 15, 2026 , the vulnerabilities reside in the web-based management interfaces of both products.

While exploitation requires valid administrative credentials, the potential impact remains catastrophic, prompting a critical severity rating.

The security bulletin outlines two distinct security flaws that operate independently of one another. Threat actors do not need to chain these vulnerabilities together to launch a successful attack.

Cisco has confirmed that there are currently no available workarounds or temporary mitigations to prevent exploitation.

Organizations must apply the official software updates immediately to secure their network environments.

Administrators are strongly advised to upgrade their systems according to the following official patch guidance:

These critical vulnerabilitie s were independently discovered and reported to Cisco by security researcher Jonathan Lein of TrendAI Research.

At the time of publication, the Cisco Product Security Incident Response Team (PSIRT) stated they are not aware of any public proof-of-concept (PoC) exploits or active malicious exploitation in the wild.

However, given the massive 9.9 CVSS score of CVE-2026-20147, cybersecurity teams are strongly urged to prioritize these patches in their vulnerability management cycles before threat actors can reverse-engineer the software fixes.

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

A new abuse campaign targeting AI-driven workflow automation platforms particularly n8n that turns legitimate automation tools into…

The U.S. Justice Department has sentenced two New Jersey residents, Kejia Wang and Zhenxing Wang,…

A security researcher operating under the alias "Chaotic Eclipse" has publicly released a proof-of-concept (PoC)…

31 high-impact vulnerabilities were actively exploited in March 2026, with a Cisco firewall zero-day abused…

A new technical review of Google Chrome’s privacy posture shows that modern tracking no longer…

Cisco has released an urgent security advisory warning organizations of a critical vulnerability in its…