Root Access via Admin: The 9.9 RCE Crisis Threatening Cisco ISE Networks

Cisco issued an urgent advisory for critical vulnerabilities in Identity Services Engine (ISE) and ISE-PIC: CVE-2026-20147 is a Remote Code Execution bug (CVSS 9.9) and CVE-2026-20148 is a path traversal issue; both require administrative credentials, can lead to OS-level access or sensitive-file disclosure, and may cause DoS on single-node deployments. Cisco reports no workarounds and provides fixed patches across multiple releases.