PT-2026-37658 · Cisco · Cisco Ise

Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-20195

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified)

Description An issue in an identity management API endpoint allows an unauthenticated remote attacker to enumerate valid user accounts. By sending crafted requests to the affected endpoint and analyzing the differing error messages in the responses, an attacker can identify and compile a list of valid usernames on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2026-20195

Affected Products

Cisco Ise

References · 4

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20195 · Security Note
• https://twitter.com/infoflowcloud/status/2052087551133884504 · Twitter Post
• https://twitter.com/CVEnew/status/2052086724344578320 · Twitter Post