CVE-2026-20190— Cisco Identity Services Engine Information Disclosure Vulnerability
Affected Version Matrix 10
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Identity Services Engine Software | 3.4.0 | affected |
3.4 Patch 1 | affected | ||
3.4 Patch 2 | affected | ||
3.4 Patch 3 | affected | ||
3.5.0 | affected | ||
3.4 Patch 4 | affected | ||
3.5 Patch 1 | affected | ||
3.4 Patch 5 | affected | ||
| … +1 more rows | |||
| Cisco | Cisco ISE Passive Identity Connector | 3.4.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-20190
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Identity Services Engine Information Disclosure Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Identity Services Engine Software 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco identity services engine software是美国Cisco公司的一套身份管理服务平台。 Cisco Identity Services Engine Software存在授权问题漏洞，该漏洞源于访问资源时授权检查不当，可能导致未经身份验证的远程攻击者通过发送特制流量访问敏感信息，包括哈希凭据。以下版本受到影响：Cisco Identity Services Engine Software 3.4.0版本、3.4 Patch 1版本、3.4 Patch 2版本、3.4 P
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Identity Services Engine Software | 3.4.0 | - | |
| Cisco | Cisco ISE Passive Identity Connector | 3.4.0 | - |
II. Public POCs for CVE-2026-20190
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20190
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20190 (1)
Same Patch Batch · Cisco · 2026-06-17 · 5 CVEs total
| CVE-2026-20181 | 9.1 CRITICAL | Cisco Identity Services Engine Remote Code Execution Vulnerability |
| CVE-2026-20220 | 6.3 MEDIUM | Cisco Crosswork Network Controller Remote Code Execution Vulnerability |
| CVE-2026-20246 | 6.0 MEDIUM | Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability |
| CVE-2026-20178 | 4.3 MEDIUM | Cisco Webex App 输入验证错误漏洞 |
IV. Related Vulnerabilities
Same product: Cisco Identity Services Engine Software
- CVE-2026-20181
Cisco Identity Services Engine Remote Code Execution Vulnera - CVE-2026-20193
Cisco Identity Services Engine Authentication Bypass Vulnera - CVE-2026-20195
Cisco Identity Services Engine Observable Response Discrepan - CVE-2026-20136
Cisco Identity Services Engine Authenticated Privilege Escal - CVE-2026-20180
Cisco Identity Services Engine Multiple Remote Code Executio
Same vendor: Cisco
- CVE-2026-20243
ClamAV ALZ Archive Processing Denial of Service Vulnerabilit - CVE-2026-20244
ClamAV DMG File Processing Denial of Service Vulnerability - CVE-2026-20215
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corr - CVE-2026-20217
ClamAV PESpin File Format Processing Out-of-Bounds Memory Co - CVE-2026-20216
ClamAV InstallShield File Format Processing Resource Exhaust
Same weakness: CWE-285
- CVE-2026-56313
Capgo - Cross-Organization Account Disruption via SSO Prelin - CVE-2026-56241
Capgo - RBAC Demotion Privilege Retention via Stale org_user - CVE-2026-15499
AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskT - CVE-2026-15474
Eleveo Call Recording Software audio.jsp improper authorizat - CVE-2026-15473
Eleveo Call Recording Software Recorded Calls restoreCallAct
V. Comments for CVE-2026-20190
No comments yet