Critical Cisco ISE Vulnerabilities Let Remote Attackers Execute Malicious Code

Cisco issued an urgent advisory for two vulnerabilities in Identity Services Engine (ISE) and ISE Passive Identity Connector: CVE-2026-20147 (critical RCE, CVSS 9.9) allowing authenticated attackers to execute arbitrary OS commands and potentially escalate to root, and CVE-2026-20148 (path traversal, CVSS 4.9) enabling sensitive file access; Cisco provides specific patch levels for affected versions and reports no known active exploitation or mitigations.