CVE-2026-20234: Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20234 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.
Affected Software
Event History
Frequently Asked Questions
Which products are in scope?
The affected product families identified are Cisco Identity Services Engine (ISE) and Cisco Identity Services Engine Passive Identity Connector (ISE-PIC).
What type of weakness does this CVE cover?
It covers multiple insufficiently protected credential issues grouped under CWE-522. The issues were identified through an internal security review and addressed in a software hardening release.
What level of access does exploitation require?
The supplied CVSS vector indicates network access, low attack complexity, no user interaction, and low privileges required. It also indicates high impacts to confidentiality, integrity, and availability, with impacts extending beyond the vulnerable component.