Cisco ISE/ISE-PIC: Unauth Auth Bypass Grants Endpoint Cert
CVE-2026-20241 Published on November 4, 2026
Cisco Identity Services Engine Authorization Bypass Vulnerability
A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.
This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.
Vulnerability Analysis
CVE-2026-20241 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-20241 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-20241
Want to know whenever a new CVE is published for Cisco Identity Services Engine Software? stack.watch will email you.
Affected Versions
Cisco Identity Services Engine Software:- Version 3.1.0 is affected.
- Version 3.1.0 p1 is affected.
- Version 3.1.0 p3 is affected.
- Version 3.1.0 p2 is affected.
- Version 3.2.0 is affected.
- Version 3.1.0 p4 is affected.
- Version 3.1.0 p5 is affected.
- Version 3.2.0 p1 is affected.
- Version 3.1.0 p6 is affected.
- Version 3.2.0 p2 is affected.
- Version 3.1.0 p7 is affected.
- Version 3.3.0 is affected.
- Version 3.2.0 p3 is affected.
- Version 3.2.0 p4 is affected.
- Version 3.1.0 p8 is affected.
- Version 3.2.0 p5 is affected.
- Version 3.2.0 p6 is affected.
- Version 3.1.0 p9 is affected.
- Version 3.3 Patch 2 is affected.
- Version 3.3 Patch 1 is affected.
- Version 3.3 Patch 3 is affected.
- Version 3.4.0 is affected.
- Version 3.2.0 p7 is affected.
- Version 3.3 Patch 4 is affected.
- Version 3.4 Patch 1 is affected.
- Version 3.1.0 p10 is affected.
- Version 3.3 Patch 5 is affected.
- Version 3.3 Patch 6 is affected.
- Version 3.4 Patch 2 is affected.
- Version 3.3 Patch 7 is affected.
- Version 3.4 Patch 3 is affected.
- Version 3.5.0 is affected.
- Version 3.4 Patch 4 is affected.
- Version 3.3 Patch 8 is affected.
- Version 3.2 Patch 8 is affected.
- Version 3.5 Patch 1 is affected.
- Version 3.3 Patch 9 is affected.
- Version 3.2 Patch 9 is affected.
- Version 3.4 Patch 5 is affected.
- Version 3.5 Patch 3 is affected.
- Version 3.5 Patch 2 is affected.
- Version 3.3 Patch 10 is affected.
- Version 3.3 Patch 11 is affected.
- Version 3.4 Patch 6 is affected.
- Version 3.2 Patch 10 is affected.
- Version 3.1.0 p11 is affected.
- Version 3.2.0 is affected.
- Version 3.1.0 is affected.
- Version 3.3.0 is affected.
- Version 3.4.0 is affected.
- Version 3.5.0 is affected.