---
id: "CVE-2026-20183"
page: "https://infrastack.ai/live/CVE-2026-20183"
kind: "vulnerability"
aliases: ["CVE-2026-20183"]
title: "Cisco ISE: authenticated admin can change file descriptions via web interface"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["cisco-ise", "infrastructure", "self-hosted"]
not_affected_if: ["no-admin-access-exposed"]
published_at: "2026-11-10T23:17:21+00:00"
first_seen_at: "2026-11-10T23:27:36+00:00"
updated_at: "2026-11-10T23:28:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-20183", "first_seen_at": "2026-11-10T23:27:36+00:00"}]
exploit_sources: []
---

# Cisco ISE: authenticated admin can change file descriptions via web interface

Link for people: https://infrastack.ai/live/CVE-2026-20183 (this .md is for agents)

Cisco Identity Services Engine's web management interface lacks server-side checks on administrator permissions. An attacker with valid administrator credentials can send a crafted HTTP request to modify file descriptions on a specific page.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T23:27:36+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-20183

## From the sources

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.

This vulnerability is due to the lack of server-side validation of Administrator permissions. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify descriptions of files on a specific page. To exploit this vulnerability, an attacker would need valid Administrator credentials.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_