CRITICAL 9.1 NVD

CVE-2026-20194

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connect

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20194 are related to incorrect resource transfer between spheres that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-669.

References

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16
This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-09-16 via NVD.

Risk Timeline

CVE Disclosed2026-09-16 · -1 days ago

Remediation Resources

Official Advisory
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/
vulnfeed aggregates 14597 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.