{"vulnerability": "cve-2026-2019", "sightings": [{"uuid": "ccc2acb0-65f6-436b-aca2-188cb53efab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmclofeilq2k", "content": "CVE-2026-20199 - Cisco ThousandEyes Virtual Appliance SSL Certificate Command Execution Vulnerability\nCVE ID : CVE-2026-20199\n \n Published : May 20, 2026, 5:16 p.m. | 59\u00a0minutes ago\n \n Description : A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual ...", "creation_timestamp": "2026-05-20T19:00:28.828447Z"}, {"uuid": "f1258046-cefc-48d3-9270-9227eb231098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724", "content": "CVE-2026-20190 - Cisco Identity Services Engine Information Disclosure Vulnerability\nCVE ID : CVE-2026-20190\n \n Published : June 17, 2026, 4:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attack...", "creation_timestamp": "2026-06-17T18:24:32.907358Z"}, {"uuid": "0da1f01d-5db7-469e-a5ea-27e6d6f6cae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "dd1e53bf-1433-4481-9f75-ad211c77c982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvoim2u2j", "content": "\ud83d\udd17 CVE : CVE-2026-20181, CVE-2026-20190", "creation_timestamp": "2026-06-18T13:15:12.155261Z"}, {"uuid": "1c6f353d-f5fd-4ecd-a8aa-893b96a9f886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775956143459982", "content": "Cisco Patches Critical Root RCE and Credential Theft Flaws in ISE\nCisco patched a critical root RCE vulnerability (CVE-2026-20181) and a high-severity information disclosure flaw (CVE-2026-20190) in its Identity Services Engine. These vulnerabilities allow authenticated root access or theft of hashed credentials.\n**Make sure your Cisco ISE and ISE-PIC systems are isolated from the internet and reachable only from trusted management networks. Apply the latest patches immediately (ISE 3.3 Patch 11, 3.4 Patch 6, or 3.5 Patch 3) and for the 3.5 command-execution fix, request the hotfix from Cisco TAC now. Don't wait for Patch 4 in August 2026.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/cisco-patches-critical-root-rce-and-credential-theft-flaws-in-ise-o-v-f-q-7/gD2P6Ple2L", "creation_timestamp": "2026-06-19T13:19:13.090776Z"}, {"uuid": "99b740f5-5768-4837-8090-857ced9c6448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116777915755287698", "content": "New advisory. \nThis relates to critical CVE-2026-20181 and CVE-2026-20190 vulnerabilities, published on the 17th.\nCisco: CRITICAL: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-06-19T17:19:44.985866Z"}, {"uuid": "b8361625-1890-49f5-8878-dfc3ceba1bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20195", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpgudagjl526", "content": "\u2694\ufe0f ATTACKS CVE Notify: \ud83d\udea8 [CVE-2026-20195](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb #InfoSec #CyberAttack #ThreatIntel", "creation_timestamp": "2026-06-29T16:01:32.066478Z"}, {"uuid": "7cd04fb8-ca4b-4cde-b55e-1cf06ef8852d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwb4jymz25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20195 \u0432 Cisco ISE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439\n\n\n\nhttps://kripta.biz/posts/30488C32-DF32-42BA-92B2-B4224765CF70", "creation_timestamp": "2026-06-29T16:36:08.308652Z"}, {"uuid": "4deae704-8289-462e-a9a6-43ce8b70585e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20193", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpluclzwsd2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20193 \u0432 Cisco ISE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f RADIUS-\u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8DA6134F-0AD9-4D9C-800B-41D016F39C8B", "creation_timestamp": "2026-07-01T15:44:29.505500Z"}, {"uuid": "e10fc6ae-2c96-4fe1-b07a-517f1359fad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpmc4yksgp2k", "content": "Cisco Catalyst Center\u306b\u3001\u30e6\u30fc\u30b6\u30fc\u5165\u529b\u306e\u4e0d\u5341\u5206\u306a\u691c\u8a3c\u306b\u3088\u308b\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u5236\u9650\u3055\u308c\u305f\u30b3\u30f3\u30c6\u30ca\u304b\u3089\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\nCVE-2026-20191 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-01T19:52:02.905259Z"}, {"uuid": "751a1025-dff7-429b-9a37-60362ef32214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmwueuzvl27", "content": "Cisco fixes a Cisco Catalyst Center vulnerability (CVE-2026-20191, CVSS 7.5) and seven ClamAV vulnerabilities causing DoS in Secure Endpoint Connectors.\n\n#Cisco #CatalystCenter #ClamAV #CVE202620191 #CyberSecurity", "creation_timestamp": "2026-07-02T02:02:53.872400Z"}, {"uuid": "48ca1efe-7c5c-4b5f-8785-23681149fbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnhcm37wm2y", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20191 \u0432 Cisco Catalyst Center\n\n\n\nhttps://kripta.biz/posts/406A6A4C-B5FE-43EB-8862-32CEC33EF77E", "creation_timestamp": "2026-07-02T06:57:11.066462Z"}, {"uuid": "15312673-5643-48e7-8bbb-1350d5e3d5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1941", "content": "", "creation_timestamp": "2026-07-02T09:45:14.081862Z"}, {"uuid": "cfcfbfaa-bcc1-45bf-9174-a93236ac82c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.246826Z"}, {"uuid": "673f2aff-cea5-4242-9152-186d2ab31b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116873964995993329", "content": "At least Cisco is undeterred by the news slump over the long July 4 holiday. This is a new advisory \nHigh-severity CVE-2026-20191: Cisco Catalyst Center Arbitrary File Read Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X @TalosSecurity #infosec #Cisco #vulnerability", "creation_timestamp": "2026-07-06T16:26:21.898841Z"}, {"uuid": "08492bc7-b539-4dc4-a659-394e5ba8bbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879880216382355", "content": "If you missed this yesterday, Cisco posted this advisory on a critical vulnerability that was first published in June.\nCRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x #Cisco #infosec #vulnerability", "creation_timestamp": "2026-07-07T17:30:38.424671Z"}, {"uuid": "deb42e0b-1cb5-40e0-9d0b-8e48d2d392db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkim6vcw22u", "content": "\u300cCisco ISE\u300d\u306bRCE\u8106\u5f31\u6027 - \u7aef\u672b\u306e\u63a5\u7d9a\u306b\u5f71\u97ff\u3059\u308b\u304a\u305d\u308c\u3082\n\nCisco Systems\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u88fd\u54c1\u300cCisco Identity Services Engine\uff08ISE\uff09\u300d\u304a\u3088\u3073\u300cCisco ISE Passive Identity Connector\uff08ISE-PIC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u4fee\u6b63\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20181\u300d\u300cCVE-2026-20190\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u3044\u305a\u308c\u3082\u8106\u5f31\u6027\u306e\u60aa\u7528\u3084\u60c5\u5831\u516c\u958b\u306a\u3069\u306f\u78ba\u8a8d...", "creation_timestamp": "2026-07-13T20:07:38.803181Z"}, {"uuid": "7e72b863-d74f-46f5-9516-d23beb0bd09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://www.cert.se/2026/07/patchtisdag-juli-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-07-15T13:16:32.067346Z"}, {"uuid": "da3a9e85-baaf-4f7f-ab54-7f1bb3b6c38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20199", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcsxagkhl2e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-20199](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tevacert-rce-RMJVEym5 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-23T12:16:40.167762Z"}, {"uuid": "b56927c2-da71-4e0d-ae24-5c456080f0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5nrwkb22b", "content": "\ud83d\udea8 CVE-2026-20192 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20192\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:18.303857Z"}, {"uuid": "addf4e0e-d7cf-47ce-9762-7229b7c93dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20194", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5nzmpjr2p", "content": "\ud83d\udea8 CVE-2026-20194 \u2014 CVSS 9.1 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20194\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:25.682704Z"}, {"uuid": "1ab59f6d-2231-4595-905d-b648fe12012e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo6uqakxh24", "content": "CVE-2026-20192 - cisco identity services engine software\nThe Cisco Identity Services Engine and its Passive Identity Connector have been found to let users bypass normal permission checks. This could let someone view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:30:04.834364Z"}, {"uuid": "8f720212-3d37-4ead-9a0c-fda866c66a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20194", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoakjqbhp2f", "content": "CVE-2026-20194\nThe Cisco Identity Services Engine and its Passive Identity Connector contain coding errors that could cause data to be moved between internal components incorrectly. This could let an attacker influence how\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:00:09.571466Z"}, {"uuid": "a39eef56-c27a-46f1-a4a6-3de4290df2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvot5kn3px2r", "content": "\ud83d\udd34 EXPLOITED\n\nCisco Identity Services Engine has a critical flaw (CVSS 10.0, CVE-2026-20192) that Cisco says is already being exploited.\nOne of six bugs fixed in Cisco's Sept 2026 ISE hardening release. Releases 3.0-3.5 affected.\nPatch now.", "creation_timestamp": "2026-09-17T04:32:56.458179Z"}, {"uuid": "f7d057ce-7316-40d5-857e-e71d08dc15f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382", "content": "", "creation_timestamp": "2026-09-17T12:15:02.871080Z"}, {"uuid": "0a8ce9f3-e60d-49ac-9f38-30fb45f08e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-021-vulnerabilities-impacting-cisco-identity-services-engine-ise-cisco-ise-passive-identity-connector-ise-pic-cve-2026-20192-cve-2026-76423-cve-2026-76460", "content": "", "creation_timestamp": "2026-09-17T20:15:17.582505Z"}, {"uuid": "a806350d-ab5f-4708-9f24-d5a4a047d540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382", "content": "Cisco heeft 21 kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE) en Cisco ISE Passive Identity Connector (ISE-PIC). De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Cisco ISE en ISE-PIC, waaronder mogelijkheden voor niet-geauthenticeerde en laaggeprivilegieerde kwaadwillenden om via netwerktoegang ongeautoriseerde acties uit te voeren. De kwetsbaarheden hebben CVSS-scores vari\u00ebrend van middel tot kritiek. Van de in totaal 21 kwetsbaarheden zijn 13 als kritiek aangemerkt. Op basis van de door Cisco gepubliceerde CVSS-scores kunnen vier kwetsbaarheden zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het omzeilen van authenticatie- en autorisatiecontroles, het verkrijgen en wijzigen van gevoelige configuratie- en identiteitsgegevens, het uitvoeren van willekeurige code of commando's met rootrechten, SQL-injectie, het uitlezen van bestanden en het verstoren van de beschikbaarheid van getroffen systemen. Sommige kwetsbaarheden vereisen voorafgaande administratieve toegangsrechten of een specifieke configuratie, terwijl andere volledig op afstand en zonder authenticatie kunnen worden misbruikt.\n\nVan de 13 kwetsbaarheden die als kritiek zijn aangemerkt, hebben meerdere een CVSS-score van 9,8 of hoger. Vier kwetsbaarheden, CVE-2026-20130, CVE-2026-20192, CVE-2026-76423 en CVE-2026-76460, hebben een CVSS-score van 10,0. \n\nDe kwetsbaarheid met kenmerk CVE-2026-76423 betreft een kwetsbaarheid in de REST API waarmee een niet-geauthenticeerde kwaadwillende administratieve toegang kan verkrijgen tot Cisco ISE en ISE-PIC. \n\nDe kwetsbaarheid met kenmerk CVE-2026-76460 betreft een authenticatieomzeiling in een API van Cisco ISE en ISE-PIC waarmee een niet-geauthenticeerde kwaadwillende toegang tot het getroffen systeem kan verkrijgen. Cisco meldt dat deze kwetsbaarheid actief wordt misbruikt. Na succesvolle exploitatie kunnen kwaadwillenden volgens Cisco commando's met rootrechten uitvoeren. \n\nDe kwetsbaarheden met kenmerk CVE-2026-20130 en CVE-2026-20192 betreffen door Cisco gegroepeerde kwetsbaarheden op het gebied van respectievelijk onvoldoende neutralisatie van invoer en onjuiste toegangscontrole. Cisco heeft voor deze hardening-release meerdere onderliggende kwetsbaarheden per CWE-klasse onder \u00e9\u00e9n CVE-ID samengebracht. De CVSS-score vertegenwoordigt daarbij de hoogst scorende onderliggende kwetsbaarheid.\n\nHet NCSC adviseert om de beveiligingsupdates voor de kritieke kwetsbaarheden met voorrang toe te passen.", "creation_timestamp": "2026-09-18T01:00:34.799789Z"}]}