Advisory Engine

← Home

Cisco Identity Services Engine Authorization Bypass Vulnerabilities

Source: cisco / cisco-sa-ise-auth-bypass-1-MxcTNgwx — original advisory

Published: 2026-09-16 · Last updated: 2026-09-16 · Vendor severity: Medium

CVEs

CVECVSSCWEExploitation
CVE-2026-20285 4.3 CWE-285: Improper Authorization Not observed in the wild
CVE-2026-20286 4.3 CWE-285: Improper Authorization Not observed in the wild

Affected Products

ProductAffected versionsFixed version
Cisco Identity Services Engine Software 3.1.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p12 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 3 Not specified by vendor Not specified by vendor
Cisco ISE Passive Identity Connector 3.1.0 Not specified by vendor Not specified by vendor
Cisco ISE Passive Identity Connector 3.2.0 Not specified by vendor Not specified by vendor
Cisco ISE Passive Identity Connector 3.3.0 Not specified by vendor Not specified by vendor
Cisco ISE Passive Identity Connector 3.4.0 Not specified by vendor Not specified by vendor