Executive brief
Cisco Identity Services Engine (ISE) is an authentication and access control platform used to manage network user access. A flaw in how ISE validates HTTP requests allows an authenticated administrator to gain write access to the underlying operating system, potentially leading to full system compromise. Although the base technical severity is rated medium, Cisco elevated the impact rating to high because attackers can quickly escalate from the initial privilege level to root-level access.
Affected products
- Cisco Identity Services Engine <UNKNOWN>
Timeline
- 2026-09-16: disclosed
- 2026-09-16: advisory