ZDI-CAN-29197: ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability
Published Aug 13, 2026
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20181.
Affected Software
1 affected component
Cisco Identity Services Engine (ISE)
Event History
Aug 13, 2026
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-29197?
ZDI-CAN-29197 has a CVSS rating of 7.2, indicating a high severity vulnerability.
2
How do I fix ZDI-CAN-29197?
To remediate ZDI-CAN-29197, apply the latest security patches provided by Cisco for Identity Services Engine.
3
What systems are affected by ZDI-CAN-29197?
ZDI-CAN-29197 specifically affects installations of Cisco Identity Services Engine.
4
Is authentication required to exploit ZDI-CAN-29197?
Yes, authentication is required to exploit the remote code execution vulnerability in ZDI-CAN-29197.
5
What kind of vulnerability is ZDI-CAN-29197?
ZDI-CAN-29197 is a zip file directory traversal vulnerability that allows remote code execution.