This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Cisco fixes 3 vulnerabilities in various products
Cisco fixes 3 vulnerabilities in various products [1][2]. Individual products and their fixed versions: Cisco ISE – 3.2 Patch 8, 3.3 Patch 8, 3.4 Patch 4, 3.5 Cisco ISE-PIC – 3.2 Patch 8, 3.3 Patch 8, 3.4 Patch 4, 3.5 The list of the remaining fixed versions can be found at [3].
Due to a flaw in the processing of DCE/RPC requests, an unauthenticated remote attacker can cause a restart of the Snort 3 detection engine in Cisco products that use it, which may lead to DoS [1].
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
More information:
- CVE-2026-20026 at cve.org, NVD
- CWE-415: Double Free at cwe.mitre.org
The vulnerability was publicly disclosed 7. 1. 2026.
Due to a flaw in the processing of DCE/RPC requests, an unauthenticated remote attacker can obtain sensitive information from analyzed network traffic in Cisco products that use the Snort 3 detection engine [1].
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
More information:
- CVE-2026-20027 at cve.org, NVD
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 7. 1. 2026.
An authenticated remote attacker with administrator privileges in Cisco ISE and Cisco ISE-PIC can, by uploading an improperly processed XML file, gain access to sensitive data from the file system that should not otherwise be accessible [2].
The vulnerability is present in products:
- Cisco ISE; <3.2.0; >=3.2.0, <3.2.8; >=3.3.0, <3.3.8; >=3.4.0, <3.4.4;
- Cisco ISE-PIC; <3.2.0; >=3.2.0, <3.2.8; >=3.3.0, <3.3.8; >=3.4.0, <3.4.4;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
More information:
- CVE-2026-20029 at cve.org, NVD
- CWE-611: Improper Restriction of XML External Entity Reference at cwe.mitre.org
The vulnerability was publicly disclosed 7. 1. 2026.
Links
- [1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort3-dcerpc-vulns-J9HNF4tH?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Multiple%20Cisco%20Products%20Snort%203%20Distributed%20Computing%20Environment/Remote%20Procedure%20Call%20Vulnerabilities%26vs_k=1
- [2] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-xxe-jWSbSDKt?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20XML%20External%20Entity%20Processing%20Information%20Disclosure%20Vulnerability%26vs_k=1
- [3] https://sec.cloudapps.cisco.com/security/center/softwarechecker.x
By CESNET, z.s.p.o. Henrieta Paločková on 8. 1. 2026.