← Back to CVE List
CVE-2026-20071NVD
Vulnerability Summary
A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks.
This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a redirection to the guest web portal. A successful exploit could allow the attacker to take over the user session and gain access to the protected 802.1X network.
This vulnerability is due to insufficient authentication checks that are performed while a user is being onboarded. An attacker could exploit this vulnerability by spoofing the legitimate user and triggering a redirection to the guest web portal. A successful exploit could allow the attacker to take over the user session and gain access to the protected 802.1X network.
CVSS v3.1 Base Metrics — Score 3.8 (LOW)
Attack VectorAdjacent
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeChanged
ConfidentialityNone
IntegrityLow
AvailabilityNone
Affected & Patched Versions
- Cisco Cisco Identity Services Engine Software >= 3.1.0
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p1
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p3
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p2
- Cisco Cisco Identity Services Engine Software >= 3.2.0
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p4
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p5
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p1
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p6
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p2
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p7
- Cisco Cisco Identity Services Engine Software >= 3.3.0
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p3
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p4
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p8
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p5
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p6
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p9
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 2
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 1
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 3
- Cisco Cisco Identity Services Engine Software >= 3.4.0
- Cisco Cisco Identity Services Engine Software >= 3.2.0 p7
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 4
- Cisco Cisco Identity Services Engine Software >= 3.4 Patch 1
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p10
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 5
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 6
- Cisco Cisco Identity Services Engine Software >= 3.4 Patch 2
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 7
- Cisco Cisco Identity Services Engine Software >= 3.4 Patch 3
- Cisco Cisco Identity Services Engine Software >= 3.5.0
- Cisco Cisco Identity Services Engine Software >= 3.4 Patch 4
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 8
- Cisco Cisco Identity Services Engine Software >= 3.2 Patch 8
- Cisco Cisco Identity Services Engine Software >= 3.5 Patch 1
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 9
- Cisco Cisco Identity Services Engine Software >= 3.2 Patch 9
- Cisco Cisco Identity Services Engine Software >= 3.4 Patch 5
- Cisco Cisco Identity Services Engine Software >= 3.5 Patch 3
- Cisco Cisco Identity Services Engine Software >= 3.5 Patch 2
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 10
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 11
- Cisco Cisco Identity Services Engine Software >= 3.4 Patch 6
- Cisco Cisco Identity Services Engine Software >= 3.2 Patch 10
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p72
- Cisco Cisco Identity Services Engine Software >= 3.1.0 p11
- Cisco Cisco Identity Services Engine Software >= 3.3 Patch 12
Not provided by cveorg for this CVE.