Changeflow GovPing Data Privacy & Cybersecurity Multiple Vulnerabilities in Cisco ISE and Webex...
Priority review Notice Added Final

Multiple Vulnerabilities in Cisco ISE and Webex Products

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published an advisory about multiple vulnerabilities affecting Cisco ISE, ISE-PIC, and Webex products. The vulnerabilities enable remote code execution (CVE-2026-20147, CVE-2026-20148, CVE-2026-20180, CVE-2026-20186) and security policy bypass (CVE-2026-20184). Affected organizations should apply vendor patches as referenced in Cisco security bulletins.

Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .
View original document View source feed page

What changed

CERT-FR issued an advisory documenting multiple critical vulnerabilities in Cisco Identity Services Engine (ISE), ISE-PIC, and Webex products. Four CVEs (CVE-2026-20147, CVE-2026-20148, CVE-2026-20180, CVE-2026-20186) allow remote code execution, while CVE-2026-20184 enables security policy bypass in Webex.\n\nOrganizations running affected ISE and ISE-PIC versions (3.2, 3.3, 3.4, 3.5 and earlier) should obtain patches from Cisco's security bulletins. Webex users are not required to take action for CVE-2026-20184 except those using SSO functionality.

What to do next

  1. Apply Cisco security patches for affected ISE and ISE-PIC versions
  2. Refer to Cisco security bulletins for patch details
  3. No action required for Webex CVE-2026-20184 unless using SSO

Archived snapshot

Apr 16, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

!Logo République Française
Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 16 avril 2026 N° CERTFR-2026-AVI-0451 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans les produits Cisco

Gestion du document

| Référence | CERTFR-2026-AVI-0451 |
| Titre | Multiples vulnérabilités dans les produits Cisco |
| Date de la première version | 16 avril 2026 |
| Date de la dernière version | 16 avril 2026 |
| Source(s) | Bulletin de sécurité Cisco cisco-sa-ise-rce-4fverepv du 15 avril 2026
Bulletin de sécurité Cisco cisco-sa-ise-rce-traversal-8bYndVrZ du 15 avril 2026
Bulletin de sécurité Cisco cisco-sa-webex-cui-cert-8jSZYhWL du 15 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Contournement de la politique de sécurité
  • Exécution de code arbitraire à distance

Systèmes affectés

  • ISE et ISE-PIC version 3.3 sans les correctifs de sécurité Patch 8 et 11 (disponible avril 2026)
  • ISE et ISE-PIC version 3.4 sans les correctifs de sécurité Patch 4 et 6 (disponible avril 2026)
  • ISE et ISE-PIC version 3.5 sans le correctif de sécurité Patch 3
  • ISE et ISE-PIC versions antérieures à 3.2 sans les correctifs de sécurité Patch 8 et 10 (disponible avril 2026)
  • Webex, la vulnérabilité CVE-2026-20184 a été corrigée par Cisco, aucune action utilisateur n'est requise, sauf en cas d'utilisation du SSO (se référer au bulletin éditeur cisco-sa-webex-cui-cert-8jSZYhWL pour plus de détails)

Résumé

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 16 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in SAP Products Allow Remote Code Execution
Priority review Apr 14, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Mattermost Server Multiple Vulnerabilities - Data Integrity, CSRF, Policy Bypass
Priority review Apr 16, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Google Chrome
Priority review Apr 16, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 16th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Minor
Document ID
CERTFR-2026-AVI-0451

Who this affects

Applies to
Technology companies Government agencies Organizations using Cisco ISE Organizations using Cisco Webex
Industry sector
5170 Telecommunications 5112 Software & Technology
Activity scope
Vulnerability remediation Patch management Network security
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Network Security Telecommunications

Browse Categories

Agriculture & Food Safety 65 AI Regulation 3 Banking & Finance 332 Consumer Protection 63 Courts & Legal 361 Data Privacy & Cybersecurity 77 Defense & National Security 51 Education 44 Energy 100 Environment 86 Environmental & Energy 37 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 278 Government Operations 107 Healthcare 142 Healthcare & Life Sciences 72 Housing 16 Immigration 8 Immigration & Border Control 2 Insurance 66 Labor & Employment 126 Legal & Judicial 30 Pharma & Drug Safety 101 Pharma & Healthcare 1 Public Health 2 Real Estate & Housing 59 Sanctions & Export Controls 1 Securities & Investments 28 Securities & Markets 103 Securities Regulation 6 Tax 64 Tax & Revenue 9 Telecom & Technology 47 Trade & Commerce 3 Trade & Sanctions 135 Transportation 85

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!