Riskcovery

CVE-2026-20071

ISE 802.1x Session Hijack Vulnerability

State
Published
Severity
3.8 Low
Published
Sep 16, 2026
Updated
Sep 17, 2026
Reserved
Oct 8, 2025

Read the record on cve.org

Description

A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks.  

This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a redirection to the guest web portal. A successful exploit could allow the attacker to take over the user session and gain access to the protected 802.1X network.

Scores

CVSSScoreVectorSource
3.13.8 LowCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:Ncisco

Weaknesses

  • CWE-290 Authentication Bypass by Spoofing

Affected Products

ProductVersions
Cisco Identity Services Engine SoftwareCisco
  • 3.1.0Affected
  • 3.1.0 p1Affected
  • 3.1.0 p3Affected
  • 3.1.0 p2Affected
  • 3.2.0Affected
  • 3.1.0 p4Affected
  • 3.1.0 p5Affected
  • 3.2.0 p1Affected
  • 3.1.0 p6Affected
  • 3.2.0 p2Affected
  • 3.1.0 p7Affected
  • 3.3.0Affected
  • 3.2.0 p3Affected
  • 3.2.0 p4Affected
  • 3.1.0 p8Affected
  • 3.2.0 p5Affected
  • 3.2.0 p6Affected
  • 3.1.0 p9Affected
  • 3.3 Patch 2Affected
  • 3.3 Patch 1Affected
  • 3.3 Patch 3Affected
  • 3.4.0Affected
  • 3.2.0 p7Affected
  • 3.3 Patch 4Affected
  • 3.4 Patch 1Affected
  • and 23 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.