FlagThis

Abstract

This research details four critical vulnerabilities affecting Cisco Webex and Cisco Identity Services Engine (ISE). CVE-2026-20184 in Webex enables unauthenticated user impersonation via a SAML certificate validation flaw, requiring manual administrator intervention to remediate. Simultaneously, three critical vulnerabilities in Cisco ISE (CVE-2026-20147, CVE-2026-20180, and CVE-2026-20186) allow authenticated attackers—including those with only read-only administrative access—to achieve remote code execution (RCE) and escalate privileges to root.