CVE-2026-20148

EUVD-2026-22963
A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary files. To exploit this vulnerability, the attacker must have valid administrative credentials.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
ciscoidentity_services_engine
𝑥
< 3.1
ciscoidentity_services_engine
3.1.0
ciscoidentity_services_engine
3.1.0:patch1
ciscoidentity_services_engine
3.1.0:patch10
ciscoidentity_services_engine
3.1.0:patch2
ciscoidentity_services_engine
3.1.0:patch3
ciscoidentity_services_engine
3.1.0:patch4
ciscoidentity_services_engine
3.1.0:patch5
ciscoidentity_services_engine
3.1.0:patch6
ciscoidentity_services_engine
3.1.0:patch7
ciscoidentity_services_engine
3.1.0:patch8
ciscoidentity_services_engine
3.1.0:patch9
ciscoidentity_services_engine
3.2.0
ciscoidentity_services_engine
3.2.0:patch1
ciscoidentity_services_engine
3.2.0:patch2
ciscoidentity_services_engine
3.2.0:patch3
ciscoidentity_services_engine
3.2.0:patch4
ciscoidentity_services_engine
3.2.0:patch5
ciscoidentity_services_engine
3.2.0:patch6
ciscoidentity_services_engine
3.2.0:patch7
ciscoidentity_services_engine
3.2.0:patch8
ciscoidentity_services_engine
3.2.0:patch9
ciscoidentity_services_engine
3.3.0
ciscoidentity_services_engine
3.3.0:patch1
ciscoidentity_services_engine
3.3.0:patch10
ciscoidentity_services_engine
3.3.0:patch2
ciscoidentity_services_engine
3.3.0:patch3
ciscoidentity_services_engine
3.3.0:patch4
ciscoidentity_services_engine
3.3.0:patch5
ciscoidentity_services_engine
3.3.0:patch6
ciscoidentity_services_engine
3.3.0:patch7
ciscoidentity_services_engine
3.3.0:patch8
ciscoidentity_services_engine
3.3.0:patch9
ciscoidentity_services_engine
3.4.0
ciscoidentity_services_engine
3.4.0:patch1
ciscoidentity_services_engine
3.4.0:patch2
ciscoidentity_services_engine
3.4.0:patch3
ciscoidentity_services_engine
3.4.0:patch4
ciscoidentity_services_engine
3.4.0:patch5
ciscoidentity_services_engine
3.5.0
ciscoidentity_services_engine
3.5.0:patch1
ciscoidentity_services_engine
3.5.0:patch2
ciscoidentity_services_engine_passive_identity_connector
𝑥
< 3.1.0
ciscoidentity_services_engine_passive_identity_connector
3.1.0
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch10
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch6
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch7
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch8
ciscoidentity_services_engine_passive_identity_connector
3.1.0:patch9
ciscoidentity_services_engine_passive_identity_connector
3.2.0
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch6
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch7
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch8
ciscoidentity_services_engine_passive_identity_connector
3.2.0:patch9
ciscoidentity_services_engine_passive_identity_connector
3.3.0
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch10
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch6
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch7
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch8
ciscoidentity_services_engine_passive_identity_connector
3.3.0:patch9
ciscoidentity_services_engine_passive_identity_connector
3.4.0
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch2
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch3
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch4
ciscoidentity_services_engine_passive_identity_connector
3.4.0:patch5
ciscoidentity_services_engine_passive_identity_connector
3.5.0
ciscoidentity_services_engine_passive_identity_connector
3.5.0:patch1
ciscoidentity_services_engine_passive_identity_connector
3.5.0:patch2
𝑥
= Vulnerable software versions