Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc [email protected] (The Hacker News)

Cisco has released updates to address two critical security flaws Identity Services Engine (ISE) that could allow remote attackers to execute arbitrary commands and elevate privileges on susceptible devices.
The vulnerabilities are listed below –

CVE-2025-20124 (CVSS score: 9.9) – An insecure Java deserialization vulnerability in an API of Cisco ISE that could permit an authenticated, remoteRead More 


Posted

in

by

Tags: