Cisco ISE — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Advanced Threat Actor Exploits Cisco and Citrix Zero-Day Vulnerabilities

  An advanced persistent threat actor exploited zero-day vulnerabilities in Cisco Identity Service Engine and Citrix NetScaler products. The attacks utilized custom malware and were detected by Amazon's MadPot honeypot…

  8 articles · Updated November 12, 2025
• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• Cisco ISE Vulnerabilities CVE-2026-20186 and CVE-2026-20180 Disclosed

  Two critical vulnerabilities, CVE-2026-20186 and CVE-2026-20180, have been published for Cisco Identity Services Engine (ISE) on April 15, 2026. Both vulnerabilities allow authenticated remote attackers with Read Only…

  3 articles · Updated April 16, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1125 articles · Updated February 9, 2026
• Zero-Day Exploits Target Cisco ISE and Citrix Vulnerabilities

  Amazon reported that a threat actor is exploiting two critical vulnerabilities, CVE-2025-20337 and CVE-2025-5777, in Cisco ISE and Citrix products as zero-days. These vulnerabilities have been identified as being…

  2 articles · Updated November 13, 2025
• APT Exploits Zero-Day Vulnerabilities in Cisco and Citrix Systems

  An advanced persistent threat (APT) group exploited zero-day vulnerabilities in Cisco Identity Services Engine (ISE) and Citrix systems, specifically CVE-2025-5777 and CVE-2025-20337. The attacks were detected by…

  16 articles · Updated November 18, 2025
• Chinese Hackers Exploit Cisco's AsyncOS Zero-Day Vulnerability

  Cisco has reported that Chinese hackers are exploiting a zero-day vulnerability in its AsyncOS software, which allows unauthorized root access to Secure Email appliances. The flaw affects Cisco's Secure Email Gateway…

  5 articles · Updated December 18, 2025
• Cisco ISE Vulnerabilities Achieve Maximum CVSS Score of 10.0

  Cisco disclosed three critical vulnerabilities in its Identity Services Engine (ISE), each receiving a CVSS score of 10.0. These vulnerabilities allow unauthenticated remote root access, posing significant risks to…

  2 articles · Updated February 7, 2026
• Cisco Patches ISE Vulnerability with Public Exploit Code

  Cisco has patched a vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products. The flaw, tracked as CVE-2026-20029, allows remote attackers with admin-level privileges to…

  7 articles · Updated January 8, 2026
• Cisco ISE Vulnerability Exposes Sensitive Data to Remote Attackers

  Cisco has addressed a critical vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that allowed authenticated administrators to access sensitive server files. The…

  3 articles · Updated January 8, 2026

Recent Intelligence Reports

• CVE 2026 20181 — nvd.nist.gov · June 19, 2026
• CVE 2026 20147 — nvd.nist.gov · April 17, 2026
• Cisco Systems issues three advisories for critical vulnerabilities in Webex, ISE — Csoonline · April 16, 2026
• CVE-2026-20147 — www.tenable.com · April 16, 2026
• Three critical Cisco ISE vulnerabilities have received the maximum CVSS score of 10.0 ... — Facebook · February 7, 2026
• Cisco ISE, ISE-PIC flaw patched following PoC exploit release — Scworld · January 9, 2026
• Cisco ISE Vulnerability Enables Access to Sensitive Data — Gbhackers · January 8, 2026
• Cisco Patches ISE Security Vulnerability After Public PoC Exploit Release — Thehackernews · January 8, 2026

Related Entities