Medium severity4.9NVD Advisory· Published Apr 15, 2026· Updated Jul 8, 2026

CVE-2026-20148

Description

A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary files. To exploit this vulnerability, the attacker must have valid administrative credentials.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Identity Services Engine Software42 versions
cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*+ 41 more
- cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*range: <3.1
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*
Cisco Systems, Inc./Identity Services Engine Passive Identity Connector42 versions
cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:*:*:*:*:*:*:*:*+ 41 more
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:*:*:*:*:*:*:*:*range: <3.1.0
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:-:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:patch1:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:patch2:*:*:*:*:*:*
Cisco Systems, Inc./Cisco ISEllm-create
Cisco Systems, Inc./Cisco ISE-PICllm-create

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-traversal-8bYndVrZnvdVendor Advisory

News mentions

ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability
Zero Day Initiative · Aug 13, 2026

cvss	0.319
epss	0.006
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000