EUVD-2026-80890
GHSA-758h-wm5v-v89m
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Network-reachable ISE surface with low-privilege auth (PR:L), no UI; credential exposure crossing a scope boundary (S:C) enables downstream compromise, so C/I/A retained as vendor-scored though A:H is generous.
Primary rating from Vendor (cisco).
CVSS VectorVendor: cisco
Lifecycle Timeline
2DescriptionCVE.org
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20234 are related to insufficiently protected credentials issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.
AnalysisAI
Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) contain an insufficiently protected credentials vulnerability (CWE-522) that allows an authenticated, low-privilege remote attacker to recover credentials, potentially compromising ISE and, due to a scope change, other connected systems. Rated CVSS 9.9, the flaw requires network reachability and a valid low-privilege session but no user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to a Cisco ISE or ISE Passive Identity Connector (ISE-PIC) deployment and a valid low-privilege authenticated session (CVSS PR:L) - it is not anonymous/unauthenticated. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, base 9.9) describes a network-reachable, low-complexity flaw needing only low-privilege authentication (PR:L), with a scope change (S:C) and total confidentiality/integrity/availability impact - a critical rating for Cisco ISE, a widely deployed enterprise Network Access Control platform. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the software hardening update referenced in Cisco advisory cisco-sa-hardening-ise-XU5EwX5T as soon as possible. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, restrict network access to Cisco ISE and ISE-PIC management interfaces to trusted administrative networks and enforce least-privilege roles; review authentication logs for anomalous credential access. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today