CVE-2026-20071

lowPriorität · verfolgen · 15EPSS 0.002 · 14. PerzentilUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.23% (14th) EPSS
CVSS 3.8 · low
Is it mine?
47 products
Prüfe deine Angriffsfläche
Who says so?
1 sources
cisco_csaf

EPSS · bewertet 2026-10-27

A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks.   This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a redirection to the guest web portal. A successful exploit could allow the attacker to take over the user session and gain access to the protected 802.1X network.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

3.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.13.8lowCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:Nprimary · psirt@cisco.com USAusnutzbarkeit 2.1 · Auswirkung 1.4
v3.13.5lowCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.13.8lowCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:Nsecondary · Cisco PSIRT US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-290US
05

betroffene Produkte (47)

Betroffene Produkte und Versionsbereiche.

20 von 47 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • cisco-sa-ise-multi-vuln-kWLeNnRDCisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities2026-09-16csaf · cisco_csafUS

    Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an unauthenticated, local attacker to either conduct an authentication bypass or disclose sensitive information. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is part of a group of advisories. For a complete list of the advisories and links to them, see Cisco Advance Notification for Publication of September 16, 2026, Security Advisories ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-jfxK98ZP"]. In addition, for further documentation of improvements and fixes in Cisco Identity Services Engine, see Cisco Identity Services Engine Security Hardening Release: September 2026 ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ise-XU5EwX5T"].

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cisco_csafNVDCVE.orgMITRE
veröffentlicht 2026-09-16geändert 2026-09-18
08

Referenzen (1) nvd

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan