← CVE Radar
CVE-2026-20241Cisco Identity Services Engine Authorization Bypass Vulnerability
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
5.3 MEDIUMEPSS 0.24%Not in KEVNVD: Awaiting Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.3 | MEDIUM | 3.1cisco (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Details
- CVE ID
- CVE-2026-20241
- Status
- Awaiting Analysis
- Assigner (CNA)
- cisco
- Published
- Nov 4, 2026
- Last modified
- 2026-11-06 21:40 UTC
- Weaknesses
- CWE-285 · Improper Authorization
Affected Products
As published by the CNA in the CVE record.
CiscoCisco Identity Services Engine Software46 version ranges
- 3.1.0
- 3.1.0 p1
- 3.1.0 p3
- 3.1.0 p2
- 3.2.0
- 3.1.0 p4
- 3.1.0 p5
- 3.2.0 p1
- 3.1.0 p6
- 3.2.0 p2
- 3.1.0 p7
- 3.3.0
- 3.2.0 p3
- 3.2.0 p4
- 3.1.0 p8
- 3.2.0 p5
- 3.2.0 p6
- 3.1.0 p9
- 3.3 Patch 2
- 3.3 Patch 1
- 3.3 Patch 3
- 3.4.0
- 3.2.0 p7
- 3.3 Patch 4
- 3.4 Patch 1
- 3.1.0 p10
- 3.3 Patch 5
- 3.3 Patch 6
- 3.4 Patch 2
- 3.3 Patch 7
- 3.4 Patch 3
- 3.5.0
- 3.4 Patch 4
- 3.3 Patch 8
- 3.2 Patch 8
- 3.5 Patch 1
- 3.3 Patch 9
- 3.2 Patch 9
- 3.4 Patch 5
- 3.5 Patch 3
- 3.5 Patch 2
- 3.3 Patch 10
- 3.3 Patch 11
- 3.4 Patch 6
- 3.2 Patch 10
- 3.1.0 p11
CiscoCisco ISE Passive Identity Connector5 version ranges
- 3.2.0
- 3.1.0
- 3.3.0
- 3.4.0
- 3.5.0