CVE-2026-20193 — Cisco Identity Services Engine Authentication Bypass Vulnerability

Description (CNA)

A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device. This vulnerability is due to improper role-based access control (RBAC) permissions on the RADIUS Policy API endpoints. An attacker could exploit this vulnerability by bypassing the web-based management interface and directly calling an affected endpoint. A successful exploit could allow the attacker to gain unauthorized read access to sensitive RADIUS Policy details that are restricted for their role.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco Identity Services Engine Software	affected 3.3.0; affected 3.3 Patch 2; affected 3.3 Patch 1; affected 3.3 Patch 3; affected 3.4.0; affected 3.3 Patch 4; affected 3.4 Patch 1; affected 3.3 Patch 5; affected 3.3 Patch 6; affected 3.4 Patch 2; affected 3.3 Patch 7; affected 3.4 Patch 3; affected 3.5.0; affected 3.4 Patch 4; affected 3.3 Patch 8; affected 3.5 Patch 1; affected 3.3 Patch 9; affected 3.4 Patch 5; affected 3.5 Patch 3; affected 3.5 Patch 2; affected 3.3 Patch 10

Vendor / product

Versions

Cisco / Cisco Identity Services Engine Software

affected 3.3.0; affected 3.3 Patch 2; affected 3.3 Patch 1; affected 3.3 Patch 3; affected 3.4.0; affected 3.3 Patch 4; affected 3.4 Patch 1; affected 3.3 Patch 5; affected 3.3 Patch 6; affected 3.4 Patch 2; affected 3.3 Patch 7; affected 3.4 Patch 3; affected 3.5.0; affected 3.4 Patch 4; affected 3.3 Patch 8; affected 3.5 Patch 1; affected 3.3 Patch 9; affected 3.4 Patch 5; affected 3.5 Patch 3; affected 3.5 Patch 2; affected 3.3 Patch 10

CWE

CWE-862

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.