ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-20176, an authenticated command injection flaw enabling remote code execution in Cisco Identity Services Engine, rated CVSS 7.2.
The Zero Day Initiative published advisory ZDI-26-716 describing a command injection vulnerability in the createDBLink function of Cisco Identity Services Engine. Remote attackers who are authenticated can execute arbitrary code on affected installations. The flaw is tracked as CVE-2026-20176 and carries a CVSS rating of 7.2. No exploitation in the wild is reported in the advisory.
- Authenticated remote code execution via createDBLink command injection in Cisco ISE.
- Tracked as CVE-2026-20176 with a CVSS score of 7.2.
- Disclosure published by ZDI as advisory ZDI-26-716.
- CVEs
- CVE-2026-20176
- Vendors
- Cisco
- Products
- Cisco Identity Services Engine
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-20176 | Authenticated Command Injection in Cisco Identity Services Engine (ISE) | 9.1 | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.