Cisco ISE EUVD-2026-81159

Exploitation requires the attacker to already hold high-privilege (administrative, PR:H) authenticated access to the Cisco ISE or ISE-PIC management API; it is not reachable by an unauthenticated or low-privilege user. Once authenticated, the attacker sends a crafted request to a vulnerable API endpoint whose XML parser does not restrict external entity references (CWE-611). Read scope is limited to files the underlying process already has OS permission to access - it is not unrestricted arbitrary file read - and there is no integrity or availability impact. The dominant limiting factor is the admin-credential prerequisite, which makes this primarily a trusted-insider or post-credential-compromise concern rather than a remote pre-auth threat.

This is a moderate-severity information-disclosure flaw, correctly scored by Cisco at CVSS 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). The network attack vector and low complexity are offset by the critical limiter PR:H - the attacker must already hold high (administrative) privileges on the ISE/ISE-PIC device, which sharply narrows the realistic threat population to already-trusted operators or an attacker who has separately obtained admin credentials. Impact is confidentiality-only (C:H, I:N, A:N): the XXE lets the underlying process read specific OS files it already has permission to access, not full arbitrary read or code execution. No EPSS score, no CISA KEV listing, and no public POC are present in the supplied data, so all three exploitation-likelihood signals point to low near-term real-world risk - this is a defense-in-depth/authenticated-admin hardening fix rather than an urgent internet-facing emergency. Note the sole Cisco reference URL is the advisory 'cisco-sa-ise-multiauth-bypass-sgD2HbL4' (a multi-vuln/auth-bypass bundle), so this XXE is one component of a grouped advisory; defenders should read the full advisory for the complete fixed-version matrix.

An attacker holding valid high-privilege ISE/ISE-PIC administrative access sends a crafted request containing an external XML entity reference to a vulnerable API. The XML parser resolves the external entity and returns the contents of a file readable by the underlying process, allowing the attacker to exfiltrate specific configuration or system files. No public exploit code is identified at time of analysis, and successful exploitation is gated on already possessing admin-level privileges.