Cisco Security Updates – 21 June 2026

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform denial of service attacks, or executemarbitrary commands on the affected system.

Sample of the addressed vulnerabilities:

1. Cisco Identity Services Engine Remote Code Execution Vulnerability (CVE-2026-20181):

• CVSS: 9.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Denial of Service

2. Cisco Identity Services Information Disclosure Vulnerability (CVE-2026- 20190):

• CVSS: 7.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain Information

The affected products:

• Cisco Identity Services Engine.
• Cisco Crosswork Network Controller.
• Cisco Umbrella Virtual Appliance.
• Cisco Webex App.