WARNING: Cisco Releases Emergency Patch For ISE Vulnerability After Proof-of-Concept Exploit Goes Public

Cisco has issued security updates to address a vulnerability in its Identity Services Engine (ISE) platform after confirming that proof-of-concept exploit code has been made publicly available, a development that has raised concerns among enterprise security teams and network administrators.

The flaw, tracked as CVE-2026-20029, affects both Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC)—products that are widely used in large organizations to control access to network resources, authenticate users and devices, and enforce zero-trust security models.

While Cisco says it has not detected active exploitation of the vulnerability, the availability of exploit code significantly increases the likelihood that threat actors will attempt to weaponize the flaw, particularly in…