Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc  – The Hacker News

Cisco has released updates to address two critical security flaws Identity Services Engine (ISE) that could allow remote attackers to execute arbitrary commands and elevate privileges on susceptible devices.
The vulnerabilities are listed below –

CVE-2025-20124 (CVSS score: 9.9) – An insecure Java deserialization vulnerability in an API of Cisco ISE that could permit an authenticated, remote  –

Read More  – The Hacker News