CVE-2026-20130
EUVD-2026-8110616.09.2026, 20:17
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20130 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cisco | identity_services_engine | 3.1.0 ≤ 𝑥 < 3.3.0 |
| cisco | identity_services_engine | 3.3.0:patch1 |
| cisco | identity_services_engine | 3.3.0:patch10 |
| cisco | identity_services_engine | 3.3.0:patch11 |
| cisco | identity_services_engine | 3.3.0:patch2 |
| cisco | identity_services_engine | 3.3.0:patch3 |
| cisco | identity_services_engine | 3.3.0:patch4 |
| cisco | identity_services_engine | 3.3.0:patch5 |
| cisco | identity_services_engine | 3.3.0:patch6 |
| cisco | identity_services_engine | 3.3.0:patch7 |
| cisco | identity_services_engine | 3.3.0:patch8 |
| cisco | identity_services_engine | 3.3.0:patch9 |
| cisco | identity_services_engine | 3.4.0 |
| cisco | identity_services_engine | 3.4.0:patch1 |
| cisco | identity_services_engine | 3.4.0:patch2 |
| cisco | identity_services_engine | 3.4.0:patch3 |
| cisco | identity_services_engine | 3.4.0:patch4 |
| cisco | identity_services_engine | 3.4.0:patch5 |
| cisco | identity_services_engine | 3.4.0:patch6 |
| cisco | identity_services_engine | 3.5.0 |
| cisco | identity_services_engine | 3.5.0:patch1 |
| cisco | identity_services_engine | 3.5.0:patch2 |
| cisco | identity_services_engine | 3.5.0:patch3 |
| cisco | identity_services_engine_passive_identity_connector | 3.1.0 ≤ 𝑥 < 3.3.0 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch1 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch10 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch11 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch2 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch3 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch4 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch5 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch6 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch7 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch8 |
| cisco | identity_services_engine_passive_identity_connector | 3.3.0:patch9 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0:patch1 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0:patch2 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0:patch3 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0:patch4 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0:patch5 |
| cisco | identity_services_engine_passive_identity_connector | 3.4.0:patch6 |
𝑥
= Vulnerable software versions