Critical Cisco ISE Vulnerabilities Let Remote Attackers Execute Malicious Code

Cisco published an urgent advisory for multiple vulnerabilities in Identity Services Engine (ISE) and ISE Passive Identity Connector, including a critical authenticated remote code execution (CVE-2026-20147, CVSS 9.9) and an authenticated path-traversal flaw (CVE-2026-20148, CVSS 4.9); Cisco urges immediate upgrades to specified patched releases and reports no known active exploitation at the time of publication.