Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution

Cisco has released critical patches for four vulnerabilities in Identity Services and Webex affecting authentication and system access.

• •CVE-2026-20184 (CVSS 9.8): Improper certificate validation in SSO allows unauthenticated attackers to impersonate users
• •CVE-2026-20147 (CVSS 9.9): Insufficient input validation in ISE/ISE-PIC enables authenticated admins to execute remote code
• •CVE-2026-20180/CVE-2026-20186 (CVSS 9.9): Input validation flaws in ISE allow read-only admins to execute arbitrary OS commands
• •Exploitation can escalate privileges to root and cause denial of service in single-node deployments

This summary was automatically generated by AI based on the original article and may not be fully accurate.