Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

[au.naingoo]

[url=https://thehackernews.com/2025/07/cisco-warns-of-critical-ise-flaw.html]Read the full article[/url]

Cisco has disclosed a new maximum-severity security vulnerability impacting Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could permit an attacker to execute arbitrary code on the underlying operating system with elevated privileges.
Tracked as CVE-2025-20337, the shortcoming carries a CVSS score of 10.0 and is similar to CVE-2025-20281, which was patched