Advisory Engine

← Home

Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities

Source: cisco / cisco-sa-ise-multi-vuln-kWLeNnRD — original advisory

Published: 2026-09-16 · Last updated: 2026-09-16 · Vendor severity: Medium

CVEs

CVECVSSCWEExploitation
CVE-2026-20071 4.9 CWE-290 Not observed in the wild
CVE-2026-20072 4.9 CWE-290 Not observed in the wild

Affected Products

ProductAffected versionsFixed version
Cisco Identity Services Engine Software 3.1.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.1.0 p9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2.0 p7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.2 Patch 9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 10 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 11 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 12 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 7 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 8 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.3 Patch 9 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 3 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 4 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 5 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.4 Patch 6 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5.0 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 1 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 2 Not specified by vendor Not specified by vendor
Cisco Identity Services Engine Software 3.5 Patch 3 Not specified by vendor Not specified by vendor