← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 13, 2026 · 05:00via Zero Day Initiative (Published)

ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability

Brief

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services Engine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.

  • The following CVEs are assigned: CVE-2026-20190.
Read more on Zero Day Initiative (Published)