PT-2026-50459 · Cisco · Cisco Ise Passive Identity Connector+1

Published 2026-06-17 · Updated 2026-06-17 · CVE-2026-20190

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco ISE (affected versions not specified) Cisco ISE-PIC (affected versions not specified)

Description Improper authorization checks when accessing a resource could allow an unauthenticated remote attacker to view sensitive information on an affected device. By sending crafted traffic, an attacker could gain access to sensitive data, including hashed credentials, which may be utilized in subsequent attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2026-20190

Affected Products

Cisco Ise Passive Identity Connector

Cisco Identity Services Engine

References · 2

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv · Vendor Advisory
• https://twitter.com/KaitanSecurity/status/2067306295716204728 · Twitter Post