Cisco Product Security Update Advisory

Overview

Cisco has released security updates to address vulnerabilities in Cisco products. Users of these products should update to the latest version.

Affected Versions

• Cisco ISE and ISE-PIC version 3.3.
• Cisco ISE and ISE-PIC version 3.4.
• Cisco ISE version 3.5.

Resolved Vulnerabilities

• CVE-2026-20181: Remote code execution vulnerability in Cisco ISE and ISE-PIC.
• CVE-2026-20190: Information disclosure vulnerability in Cisco ISE and ISE-PIC.

Patch Information

• CVE-2026-20181.
  • Cisco ISE and ISE-PIC Version 3.3 Patch 11.
  • Cisco ISE and ISE-PIC version 3.4 Patch 6.
  • Cisco ISE version 3.5 Patch 4 or Hot Patch.
• CVE-2026-20190.
  • Cisco ISE and ISE-PIC version 3.4 Patch 6.
  • Cisco ISE version 3.5 Patch 3.

Note

• You must update to the latest version of the Vulnerability Patch to address these vulnerabilities, following the instructions on the reference site.