CVE-2026-20130EPSS p31.4%
CVE-2026-20130CVE-2026-20130
cisco / identity_services_engine
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-20130 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
Scoring
| CVSS | 10.0 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 0.40% probability of exploitation · percentile 31.4% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-28 |