Multiple Vulnerabilities in Cisco ISE and ISE-PIC Could Allow for Remote Code Execution

Multiple critical vulnerabilities were found in Cisco ISE and Cisco ISE-PIC (CVE-2025-20281, CVE-2025-20282) that allow unauthenticated remote attackers to execute arbitrary code as root or upload and execute arbitrary files via crafted API requests due to insufficient input and file validation; successful exploitation could grant root privileges on affected devices.