Cisco Identity Services Engine — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• Cisco ISE Vulnerabilities CVE-2026-20186 and CVE-2026-20180 Disclosed

  Two critical vulnerabilities, CVE-2026-20186 and CVE-2026-20180, have been published for Cisco Identity Services Engine (ISE) on April 15, 2026. Both vulnerabilities allow authenticated remote attackers with Read Only…

  3 articles · Updated April 16, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1125 articles · Updated February 9, 2026
• APT Exploits Zero-Day Vulnerabilities in Cisco and Citrix Systems

  An advanced persistent threat (APT) group exploited zero-day vulnerabilities in Cisco Identity Services Engine (ISE) and Citrix systems, specifically CVE-2025-5777 and CVE-2025-20337. The attacks were detected by…

  16 articles · Updated November 18, 2025
• Asimily Enhances Cisco ISE with SGACL Support for Improved Device Segmentation

  Asimily has announced an expansion of its integration with Cisco Identity Services Engine (ISE) by adding support for Security Group Access Control Lists (SGACL). This enhancement allows organizations to leverage device…

  2 articles · Updated January 15, 2026
• Cyber Threats: Oracle RCE and Ransomware Attacks Identified

  Recent cybersecurity reports detail multiple threats, including Oracle Concurrent Processing Remote Code Execution and various Clop ransomware variants. Affected systems include those protected by Check Point IPS and…

  2 articles · Updated December 1, 2025

Recent Intelligence Reports

• Multiple Vulnerabilities in Cisco Identity Services Engine — Csa.Sg · June 19, 2026
• CVE-2026-20180 — nvd.nist.gov · April 16, 2026
• Critical Cisco ISE Flaws Let Remote Attackers Execute Malicious Code — Gbhackers · April 16, 2026
• CVE-2026-20147: Cisco Identity Services Engine Remote Code Execution Vulnerability [CRITICAL] CVSS 9.9 Exploit Intelligence — Recent CVEs / 8h A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to — exploit-intel.com · April 16, 2026
• CVE-2026-20147 - Exploits & Severity — Feedly · April 16, 2026
• Asimily Expands Cisco ISE Integration With SGACL — Msspalert · January 15, 2026
• CVE-2025-20337: Actionable Report for SOC Teams — Socprime · November 18, 2025
• 17th November — Research.Checkpoint · November 17, 2025

Related Entities