{"affected":[{"defaultStatus":"unknown","product":"Cisco Identity Services Engine Software","source":"CNA: cisco","vendor":"Cisco","versions":[{"status":"affected","version":"3.1.0"},{"status":"affected","version":"3.1.0 p1"},{"status":"affected","version":"3.1.0 p3"},{"status":"affected","version":"3.1.0 p2"},{"status":"affected","version":"3.2.0"},{"status":"affected","version":"3.1.0 p4"},{"status":"affected","version":"3.1.0 p5"},{"status":"affected","version":"3.2.0 p1"},{"status":"affected","version":"3.1.0 p6"},{"status":"affected","version":"3.2.0 p2"},{"status":"affected","version":"3.1.0 p7"},{"status":"affected","version":"3.3.0"},{"status":"affected","version":"3.2.0 p3"},{"status":"affected","version":"3.2.0 p4"},{"status":"affected","version":"3.1.0 p8"},{"status":"affected","version":"3.2.0 p5"},{"status":"affected","version":"3.2.0 p6"},{"status":"affected","version":"3.1.0 p9"},{"status":"affected","version":"3.3 Patch 2"},{"status":"affected","version":"3.3 Patch 1"},{"status":"affected","version":"3.3 Patch 3"},{"status":"affected","version":"3.4.0"},{"status":"affected","version":"3.2.0 p7"},{"status":"affected","version":"3.3 Patch 4"},{"status":"affected","version":"3.4 Patch 1"},{"status":"affected","version":"3.1.0 p10"},{"status":"affected","version":"3.3 Patch 5"},{"status":"affected","version":"3.3 Patch 6"},{"status":"affected","version":"3.4 Patch 2"},{"status":"affected","version":"3.3 Patch 7"},{"status":"affected","version":"3.4 Patch 3"},{"status":"affected","version":"3.5.0"},{"status":"affected","version":"3.4 Patch 4"},{"status":"affected","version":"3.3 Patch 8"},{"status":"affected","version":"3.2 Patch 8"},{"status":"affected","version":"3.5 Patch 1"},{"status":"affected","version":"3.3 Patch 9"},{"status":"affected","version":"3.2 Patch 9"},{"status":"affected","version":"3.4 Patch 5"},{"status":"affected","version":"3.5 Patch 3"},{"status":"affected","version":"3.5 Patch 2"},{"status":"affected","version":"3.3 Patch 10"},{"status":"affected","version":"3.3 Patch 11"},{"status":"affected","version":"3.4 Patch 6"},{"status":"affected","version":"3.2 Patch 10"},{"status":"affected","version":"3.1.0 p11"}]},{"defaultStatus":"unknown","product":"Cisco ISE Passive Identity Connector","source":"CNA: cisco","vendor":"Cisco","versions":[{"status":"affected","version":"3.2.0"},{"status":"affected","version":"3.1.0"},{"status":"affected","version":"3.3.0"},{"status":"affected","version":"3.4.0"},{"status":"affected","version":"3.5.0"}]}],"cveId":"CVE-2026-20241","cwes":["CWE-285"],"description":"A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.\r\n\r\nThis vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to bypass authorization to obtain an endpoint certificate.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: cisco","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},{"score":5.3,"severity":"medium","source":"NVD: psirt@cisco.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1793816255484,"publishedAt":1793809623473,"references":[{"source":"CNA: cisco","tags":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO"},{"source":"psirt@cisco.com","tags":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-cert-mE9BD5GO"}],"remediation":[],"revision":"17423db9fbf2522554ad991a74ac286bb31652c4800a83c0973c5956cd95e96f","sources":[{"modifiedAt":1793816255484,"name":"CNA: cisco","retrievedAt":1793819458355,"url":"https://www.cve.org/CVERecord?id=CVE-2026-20241"},{"modifiedAt":1793812655883,"name":"NVD","retrievedAt":1793816720046,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20241"}],"ssvc":{"assessedAt":1793816246586,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Cisco Identity Services Engine Authorization Bypass Vulnerability","updatedAt":1793819458355}