CVE-2026-20193

{"id": "CVE-2026-20193", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20193", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-06T17:35:13.146938Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Cisco", "product": "Cisco Identity Services Engine Software", "versions": [{"status": "affected", "version": "3.3.0"}, {"status": "affected", "version": "3.3 Patch 2"}, {"status": "affected", "version": "3.3 Patch 1"}, {"status": "affected", "version": "3.3 Patch 3"}, {"status": "affected", "version": "3.4.0"}, {"status": "affected", "version": "3.3 Patch 4"}, {"status": "affected", "version": "3.4 Patch 1"}, {"status": "affected", "version": "3.3 Patch 5"}, {"status": "affected", "version": "3.3 Patch 6"}, {"status": "affected", "version": "3.4 Patch 2"}, {"status": "affected", "version": "3.3 Patch 7"}, {"status": "affected", "version": "3.4 Patch 3"}, {"status": "affected", "version": "3.5.0"}, {"status": "affected", "version": "3.4 Patch 4"}, {"status": "affected", "version": "3.3 Patch 8"}, {"status": "affected", "version": "3.5 Patch 1"}, {"status": "affected", "version": "3.3 Patch 9"}, {"status": "affected", "version": "3.4 Patch 5"}, {"status": "affected", "version": "3.5 Patch 3"}, {"status": "affected", "version": "3.5 Patch 2"}, {"status": "affected", "version": "3.3 Patch 10"}], "defaultStatus": "unknown"}]}], "published": "2026-05-06T17:16:21.500", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device.\r\n\r\nThis vulnerability is due to improper role-based access control (RBAC) permissions on the RADIUS Policy API endpoints. An attacker could exploit this vulnerability by bypassing the web-based management interface and directly calling an affected endpoint. A successful exploit could allow the attacker to gain unauthorized read access to sensitive RADIUS Policy details that are restricted for their role."}, {"lang": "es", "value": "Una vulnerabilidad en los endpoints de la API de pol\u00edticas RADIUS de Cisco ISE podr\u00eda permitir a un atacante remoto autenticado con privilegios de Administrador de solo lectura obtener acceso no autorizado a informaci\u00f3n sensible en un dispositivo afectado.\n\nEsta vulnerabilidad se debe a permisos de control de acceso basado en roles (RBAC) inadecuados en los endpoints de la API de pol\u00edticas RADIUS. Un atacante podr\u00eda explotar esta vulnerabilidad eludiendo la interfaz de gesti\u00f3n basada en web y llamando directamente a un endpoint afectado. Un exploit exitoso podr\u00eda permitir al atacante obtener acceso de lectura no autorizado a detalles sensibles de la pol\u00edtica RADIUS que est\u00e1n restringidos para su rol."}], "lastModified": "2026-10-26T19:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F8D9766-8462-48B6-A997-EEF549569786", "versionEndIncluding": "3.2.0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1B9C2C1-59A4-49A0-9B74-83CCB063E55D"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFD29A0B-0D75-4EAB-BCE0-79450EC75DD0"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43F3A55D-D4FC-4D93-9513-94B64B21A2B4"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6C94CC4-CC08-4DAF-A606-FDAFC92720A9"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB069EA3-7B8C-42B5-8035-2EE5ED3F56E4"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF8B81A6-BF44-4E5F-B167-39F61DDCA026"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56E0F0EC-3E66-4866-89F5-89B331F3F517"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E3E8937-2859-4A2A-91C0-05F674EF0466"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4B14684-EB9E-405B-85FA-B62E57CB292C"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22B752D1-9E8F-4FB7-8EEB-F9234492372B"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85A1CC7D-FE54-4AC0-B98F-972C4B1F3189"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D23905E0-E525-49B1-8E5F-4EB42D186768"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74509498-38EF-4345-9583-CEF5C26CA1D8"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD05FF93-7B8C-4283-9DB7-E03FE98FAADF"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F9B6A8E-E773-44A3-9266-878F0C58EB41"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3727619-E0CA-4CA9-BE35-0C732BCF1741"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CFB7565-3930-409C-B5DB-CE77E6ED7C42"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2610FD35-BC4B-41B7-9C92-E6E5264FEE54"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FEE4377-B238-4442-9892-28CECFB2319E"}, {"criteria": "cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6598563B-7E32-43FB-96A7-88C53E4CE226"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}