Cisco ISE Vulnerability Enables Access to Sensitive Data

**Cisco ISE XXE (CVE-2026-20029):** Cisco disclosed a medium-severity XML External Entity vulnerability in ISE and ISE-PIC that allows authenticated administrative users to read arbitrary files on the host via a malicious XML upload; proof-of-concept code is publicly available, no workarounds exist, and Cisco recommends immediate upgrade to fixed releases.