← Back to search

CVE-2026-20307

9.9 CRITICAL

Published 2026-09-16 · Updated 2026-09-17

AI risk analysis

Summary
This vulnerability allows an attacker with low privileges to execute arbitrary commands on the underlying operating system of Cisco ISE via insecure deserialization, potentially leading to privilege escalation and denial of service.
Exploitability
Exploitation requires authenticated access and knowledge of crafting a serialized Java object; low-privileged administrative credentials are sufficient.
Blast radius
If exploited, this could result in full control over the affected device and network disruptions for unauthenticated endpoints.
Prioritized remediation
Apply vendor patches or update to the latest version of Cisco ISE immediately.
rcewebauth-limitedos-attackcritical

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root. In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-502

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.