This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Cisco fixes 5 vulnerabilities

Cisco fixes 5 vulnerabilities in its products [1]. Products and their fixed versions: Cisco Identity Services Engine - 3.3 Patch 11, 3.4 Patch 6, 3.5 Patch 4 (August 2026) [2] Cisco Umbrella Virtual Appliance - 3.8.5 [3] Cisco Crosswork Network Controller - 7.1.3, 7.2.1 [4] Cisco Webex App - fixed in the cloud service [5]

Cisco Identity Services Engine - RCE, DoS (CVE-2026-20182)
CVSS 9.1 (Critical)

An authenticated remote attacker with administrator privileges can, by means of a crafted HTTP request, execute arbitrary commands, escalate privileges to the root user and, in a single-node deployment, carry out a DoS attack due to insufficient validation of user input [2].

The vulnerability is present in product:

  • Cisco ISE; >=3.3, <3.3 Patch 11; >=3.4, <3.4 Patch 6; >=3.5, <3.5 Patch 4

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:X

More information:

  • CVE-2026-20182 at cve.org, NVD
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org

The vulnerability was publicly disclosed 16. 6. 2026.

Cisco Identity Services Engine - information disclosure (CVE-2026-20190)
CVSS 7.5 (High)

An unauthenticated remote attacker can obtain sensitive information, including hashed credentials, due to improper authorization checks when accessing resources [2].

The vulnerability is present in product:

  • Cisco ISE; >=3.4, <3.4 Patch 6; >=3.5, <3.5 Patch 3

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

More information:

The vulnerability was publicly disclosed 17. 6. 2026.

Cisco Crosswork Network Controller - server-side template injection (CVE-2026-20220)
CVSS 6.3 (Medium)

An authenticated remote attacker with template write permissions can execute arbitrary operating system commands in parts of the file system accessible to the template user due to insufficient input validation in the configuration templating engine of the Cisco Crosswork Network Controller web interface [4].

The vulnerability is present in product:

  • Cisco Crosswork Network Controller; <=7.1; >=7.1, <7.1.3

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X

More information:

  • CVE-2026-20220 at cve.org, NVD
  • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 17. 6. 2026.

Cisco Umbrella Virtual Appliance - privilege escalation (CVE-2026-20246)
CVSS 6.0 (Medium)

An authenticated local attacker with vmadmin privileges can escalate privileges to the root user due to insufficient validation of CLI commands [3].

The vulnerability is present in product:

  • Cisco Umbrella Virtual Appliance Software; <3.8.5

CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:X/RL:X/RC:X

More information:

The vulnerability was publicly disclosed 17. 6. 2026.

Cisco Webex App - open redirect (CVE-2026-20178)
CVSS 4.3 (Medium)

An unauthenticated remote attacker can redirect users to a malicious website due to insufficient validation of URL parameters [5].

The vulnerability is present in product:

  • Cisco Webex App;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:X/RL:X/RC:X

More information:

The vulnerability was publicly disclosed 17. 6. 2026.

By CESNET, z.s.p.o. Michaela Jarošová on 18. 6. 2026.

CESNET, z.s.p.o. Logo