| Package | Affected versions | Patched versions |
|---|---|---|
| identity services engine | = 3.3.0= 3.4.0= 3.5.0≥ 3.1.0, < 3.3.0 | 3.3.0 |
| identity services engine passive identity connector | = 3.3.0= 3.4.0≥ 3.1.0, < 3.3.0 | 3.3.0 |
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20130 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free