Cisco fixed a critical ISE vulnerability that lets attackers to gain root access


Cisco fixed a critical ISE vulnerability that lets attackers to gain root access

Pierluigi Paganini
June 18, 2026

Cisco addressed CVE-2026-20181, a critical ISE vulnerability that lets authenticated admins execute commands and gain root access.

Cisco addressed a critical command execution vulnerability, tracked as CVE-2026-20181 (CVSS score of 9.1), affecting Identity Services Engine (ISE) and ISE-PIC. The flaw stems from improper validation of user-supplied input, allowing an authenticated attacker with administrative credentials to send crafted HTTP requests and execute commands on the underlying operating system. Successful exploitation can lead to privilege escalation and full root access.

According to the advisory, only an attacker with valid administrative credentials can exploit this vulnerability.

“This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.” reads the advisory. “In single-node deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.”

In single-node deployments, attackers could exploit the flaw to trigger a denial-of-service condition, blocking unauthenticated endpoints from accessing the network until recovery.

Cisco fixed the issue in ISE/ISE-PIC 3.3 Patch 11 and 3.4 Patch 6, while a hotfix is available for version 3.5 and will be included in Patch 4 scheduled for August.

Cisco also patched CVE-2026-20190 (CVSS score of 7.5), a high-severity information disclosure flaw that could expose sensitive data, including hashed credentials, to unauthenticated attackers.

“This vulnerability is due to improper authorization checks when a resource is accessed. An attacker could exploit this vulnerability by sending crafted traffic to an affected device.” states the advisory. “A successful exploit could allow the attacker to gain access to sensitive information, including hashed credentials that could be used in future attacks.”

The Cisco Product Security Incident Response Team (PSIRT) is not aware of attacks in the wild exploiting one of these vulnerabilities.

Additional information is available on the security advisories page.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, Identity Services Engine)







Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


When Encanto was released, it was something of a cultural phenomenon. You couldn’t escape the song “We Don’t Talk About Bruno,” and the soundtrack went to the top of the charts. If you loved Encanto, there’s another overlooked Lin-Manuel Miranda animated musical on Netflix that’s better in many ways.

Vivo is another Lin-Manuel Miranda musical

He’s also the voice of the lead character

Vivo the kinkajou from the movie Vivo. Credit: Sony Pictures Animation

Vivo is a 2021 animated musical comedy from Sony Pictures Animation, the same studio behind smash-hit movies such as Spider-Man: Into the Spider-Verse and KPop Demon Hunters. Directed by Kirk DeMicco, who co-wrote it with Quiara Alegría Hudes, it features original songs written by Lin-Manuel Miranda, the musical genius who shot to superstardom on the back of Hamilton.

Miranda also plays the title character of Vivo, a kinkajou (a small, nocturnal mammal) whose days are spent earning money by playing music in the plaza with his aging owner, Andrés. When Andrés dies, Vivo makes it his mission to deliver a song that Andrés wrote to his old friend Marta Sandoval, a famous singer played by Gloria Estefan. The song reveals Andrés’ true feelings for Marta, but he could never bring himself to give it to her.

Vivo is helped on his quest by Gabi, a young misfit and the daughter of Andrés’ niece. The movie follows their journey through the Florida Everglades to reach Miami and deliver the song.

Why Vivo flew under the radar

The big theatrical release never happened

Gabi and Vivo on a raft in the movie Vivo. Credit: Sony Pictures Animation

Vivo is an animated musical from a major animation studio, with a cast of big names including Miranda, Gloria Estefan, and Zoe Saldaña. It features music from one of the most in-demand songwriters in the world, who also stars in it. Why isn’t it more well-known?

Perhaps the biggest reason is that Vivo never got its expected theatrical release. After the global pandemic disrupted Sony’s plans for a wide theatrical release, the rights were sold to Netflix. Instead of a major theatrical run, it joined the huge catalog of Netflix, where shows and movies all too often get buried by the churn of new content.

It meant that, unlike Encanto, Vivo never really got the chance to enter the zeitgeist or become a TikTok staple. Its fairly quiet release on a streaming service meant that it never got the attention that it deserved.

Subscription with ads

Yes, $8/month

Simultaneous streams

Two or four

Stream licensed and original programming with a monthly Netflix subscription.


Vivo’s music hits different

Gloria Estefan still has it

When Encanto came out, people raved about the music. The song “We Don’t Talk About Bruno” went viral, with an endless stream of TikTok videos. To my mind, however, the music in Vivo is just so much better.

I never really got the hype about “We Don’t Talk About Bruno.” It’s not bad, but it’s not even the best song in Encanto. While the music in Encanto is good, none of the songs really stand out as being classics. I listen to a lot of Disney movie soundtracks with my kids, and Encanto very rarely makes the playlist, while Moana, which also includes songs written by Lin-Manuel Miranda, gets played far more often.​​​​​​​


The Pixar Logo featured before their movies


Pixar’s best movie isn’t one of the old classics, it’s this blockbuster from 2017

I’m sorry, Toy Story, but a new winner has entered the chat

What gets played a lot is the Vivo soundtrack because it’s genuinely brilliant. There’s something for everyone, too; there are four of us in the family, and each of us has a different favorite song from the soundtrack. That’s how good it is.

“One of a Kind” is the song that introduces us to Vivo and Andrés, and it’s a great mix of classic Cuban mambo and clave rhythms combined with Lin-Manuel Miranda’s trademark hip-hop flow. “My Own Drum” is an absolute banger sung by Gabi featuring possibly the greatest recorder solo of all time. My personal favorite, “Keep The Beat,” is a gorgeous song about keeping going when things start to change.

The most beautiful song in the movie is “Inside Your Heart,” performed by the legendary Gloria Estefan. This is the song that Andrés wrote for Marta, expressing his feelings for her. It’s a stunning song, and Estefan’s voice still sounds incredible. For me, it lands far harder than anything in Encanto.

What Vivo offers that Encanto doesn’t

There’s more than just the awesome music

2D animation of a young Andres and Marta dancing from the movie Vivo. Credit: Sony Pictures Animation

While both movies have music written by Lin-Manuel Miranda, only one of them features the songwriter in the main cast. Some of the fast-paced rhymes in Vivo are so distinctive that you can’t imagine anyone else doing them justice, as Dwayne Johnson proved in Moana.

Vivo also has a more dynamic story, with the action involving a race from Cuba to Miami rather than being set entirely within one location like Encanto. It also includes some interesting stylized 2D sequences that mix up the look of the movie. The emotional stakes are also much higher in Vivo, with a story that touches on death, regret, lost love, and finding your place in the world.

That’s not to say it’s a perfect movie. The plot does dip a little in the middle, but the stunning music and bittersweet ending make up for the flaws.


A woman watching Netflix with two kids, a 'Kids' icon in the background, and the Netflix logo.


My Kids Love These 10 Netflix Shows—And Shockingly, So Do I

Are you a parent tired of watching awful kids’ shows? Give yourself a break with these Netflix series that will entertain both you and your children.


Check out Vivo if you haven’t already

If you loved Encanto and you haven’t watched Vivo, you should definitely check it out. It’s a movie that really deserves more attention than it gets. I guarantee it will be the best kinkajou-based animated musical you’ll ever see.



Source link