CVE-2026-20148

OVERVIEW CVE-2026-20148 is a path traversal vulnerability affecting Cisco ISE (Identity Services Engine) and Cisco ISE-PIC products. The flaw stems from improper validation of user-supplied input, permitting authenticated attackers to bypass directory restrictions and access arbitrary files on the underlying operating system through crafted HTTP requests. SEVERITY The vulnerability carries a CVSS score of 4.9 (Medium) with a network-based attack vector requiring high-privilege administrative credentials. While the attack complexity is low and requires no user interaction, the impact is limited to confidentiality compromise; there is no integrity or availability impact. Exploitation requires valid administrative access, significantly constraining the threat actor pool and reducing real-world risk. EXPLOITATION STATUS CVE-2026-20148 is not currently listed on CISA's Known Exploited Vulnerabilities catalog, indicating no confirmed active exploitation in the wild. The vulnerability remains inactive on security community hot lists with minimal EPSS probability (0.0006), suggesting low real-world exploitation likelihood. No public exploit code has been widely distributed, and community attention remains limited at this time.