Skip to content
Cisco ISE Vulnerability Exposes Sensitive Data to Remote Attackers

Cisco ISE Vulnerability Exposes Sensitive Data to Remote Attackers

First seen 8 Jan 2026, 19:50 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Cisco has addressed a critical vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that allowed authenticated administrators to access sensitive server files. The vulnerability, identified as CVE-2026-20029, is due to a flaw in XML parsing within the web management interface, with a CVSS score yet to be finalized.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 196d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Cisco and CVE-2026-20029 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed