Warning: Two critical vulnerabilities impact Cisco ISE, leading to unauthenticated remote code execution as root, Patch Immediately!

Cisco and the Centre for Cybersecurity Belgium warn of multiple unauthenticated remote code execution vulnerabilities in Cisco ISE and ISE-PIC (versions 3.3 and 3.4) — including CVE-2025-20281, CVE-2025-20282 and CVE-2025-20337 — that allow attackers to obtain root privileges; CVSS scores range from 9.8 to 10.0, active exploitation has been reported, and the only recommended remediation is immediate patching.