Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain unauthorized access to sensitive information on an affected device. This vulnerability is due to improper role-based access control (RBAC) permissions on the RADIUS Policy API endpoints. An attacker could exploit this vulnerability by bypassing the web-based management interface and directly calling an affected endpoint. A successful exploit could allow the attacker to gain unauthorized read access to sensitive RADIUS Policy details that are restricted for their role.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-05-06 | 2 | Disclosure1General1 |
| 2026-05-14 | 1 | Disclosure1 |
CVE-2026-20193 A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain una… https://www.cve.org/CVERecord?id=CVE-2026-20193
Post summary
The post briefly describes CVE-2026-20193 affecting Cisco ISE's RADIUS Policy API but provides no PoC, exploit code, patch, or detailed technical data.
Cisco PSIRT May 6 bundle: 6 advisories. Headlines: ISE auth-bypass CVE-2026-20193 (CVSS 4.3, Medium). The one nobody read: CVE-2026-20034 Unity Connection RCE-as-root (CVSS 8.8, High, no workaround). If you rank by SIR alone, you missed it. http://netdevops-tools.thebackroom.ai
Post summary
Cisco PSIRT released a bundle of advisories, highlighting a high‑severity Unity Connection RCE (CVE-2026-20034) and a medium‑severity ISE auth‑bypass (CVE-2026-20193).
🚨*CVE* CVE-2026-20193 A vulnerability in the RADIUS Policy API endpoints of Cisco ISE could allow an authenticated, remote attacker with read-only Administrator privileges to gain una… https://www.cve.org/CVERecord?id=CVE-2026-20193 ----- Traducción: CVE-2026-20193 Una vuln… http://infoflow.cloud`
Post summary
The tweet announces the disclosure of CVE‑2026‑20193, a Cisco ISE RADIUS Policy API flaw allowing read‑only administrators to acquire unauthorized access, but provides no PoC, exploit code, or patch details.
21 of 21 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cisco | identity_services_engine | - | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.3.0 | - | - |
| App | cisco | identity_services_engine | 3.4.0 | - | - |
| App | cisco | identity_services_engine | 3.4.0 | - | - |
| App | cisco | identity_services_engine | 3.4.0 | - | - |
| App | cisco | identity_services_engine | 3.4.0 | - | - |
| App | cisco | identity_services_engine | 3.4.0 | - | - |
| App | cisco | identity_services_engine | 3.4.0 | - | - |
| App | cisco | identity_services_engine | 3.5.0 | - | - |
| App | cisco | identity_services_engine | 3.5.0 | - | - |
| App | cisco | identity_services_engine | 3.5.0 | - | - |