CRITICAL 10.0 NVD

CVE-2026-20130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connect

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20130 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.

References

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-09-16 via NVD.

Risk Timeline

CVE Disclosed2026-09-16 · -1 days ago

Remediation Resources

Official Advisory
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/
vulnfeed aggregates 14597 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.