CVE-2026-20234

Katalog CVE

CVSS 9.9 · Critical EPSS 0,37%

Kerentanan Insufficiently Protected Credentials pada cisco identity services engine, cisco identity services engine passive identity connector. Skor CVSS 3.1 9.9 (Critical) menurut cisco.com.

Deskripsi (NVD)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20234 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.

Rincian

Terbit di NVD

16 September 2026

Terakhir diubah

28 September 2026

Status NVD

Analyzed

CVSS 3.1

9.9 (Critical), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T advisory vendor