CVE-2026-20241 · Infrastructure
NO FIX YET
Cisco Identity Services Engine and its Passive Identity Connector check authorization improperly on some requests. An unauthenticated remote attacker can send a crafted request and obtain an endpoint identity certificate.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Organizations running Cisco Identity Services Engine or Cisco ISE Passive Identity Connector are potentially exposed, since an unauthenticated remote attacker can send a crafted request to an affected device. The sources do not list affected versions or configurations. Teams not running these Cisco products can skip it.
Not affected if not-running-ise, not-running-ise-pic
Who cares cisco, ise, network-access-control
No fix yet, per the sources.
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.
This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
This page as .md · .json · in your agent: get_signal("CVE-2026-20241") · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.