Critical Command Execution Vulnerability Patched in Cisco ISE

Cisco has patched a critical vulnerability in its Identity Services Engine products that could allow attackers with admin credentials to execute arbitrary commands and escalate privileges to root level. The flaw, tracked as CVE-2026-20181 with a severity score of 9.1, was fixed along with a high-severity information disclosure bug that could expose hashed credentials to unauthenticated attackers. Cisco says there's no evidence of these vulnerabilities being exploited in the wild, and fixes are now available across multiple product versions.