CVE-2026-20241: Medium severity vulnerability
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker does not need authentication, prior privileges, or user interaction. They can attempt exploitation remotely by sending a crafted request to an affected device.
What could an attacker obtain if exploitation succeeds?
A successful exploit allows the attacker to bypass authorization checks and obtain an endpoint identity certificate. The provided information indicates confidentiality impact only, with no stated integrity or availability impact.
Which products are identified as affected?
The vulnerability is identified in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). No affected versions, configuration requirements, or mitigation details are provided.