AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-20147

CRITICAL · CVSS 9.9 EPSS 11.68% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-04-15 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.9. It affects Cisco. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 11.7% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-20147
Severity
CRITICAL
CVSS
9.9
EPSS
11.68%
Cisco

Original NVD Description

A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node ISE deployments, successful exploitation of this vulnerability could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored.

Related CVEs

Other vulnerabilities affecting the same vendor(s)