CVE-2026-20300: Cisco Identity Services Engine SQL Injection Vulnerability
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the attacker must have at least low-privileged administrative credentials. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to read or modify data in the underlying database.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Cisco Identity Services Engine deployments are exposed if an attacker can reach the affected device remotely and has at least low-privileged administrative credentials. Unauthenticated attackers are not described as able to exploit this issue.
What can an attacker do after successful exploitation?
A successful SQL injection attack could allow the attacker to read or modify data in the underlying database. The provided information does not indicate that the vulnerability allows denial of service.
What access does an attacker need to exploit it?
The attacker needs remote network access to the affected device and at least low-privileged administrative credentials. Exploitation involves sending a crafted request containing improperly validated user-supplied input.