{"metadata": {"vulnerability": "CVE-2026-20190", "count": 36, "kinds": {"milestone": 8, "sighting": 8, "kev": 0, "other": 20}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0208", "record": "NCSC-2026-0208", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.395Z", "date_only": false, "value": "2025-10-08T11:59:15.395Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20190", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-17T00:00:00Z", "date_only": true, "value": "2026-06-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0772", "record": "CERTFR-2026-AVI-0772", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-17T15:54:23Z", "date_only": false, "value": "2026-06-17T15:54:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-17T16:00:00Z", "date_only": false, "value": "2026-06-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-17T16:17:04.911Z", "date_only": false, "value": "2026-06-17T16:17:04.911Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-17T16:17:04.911Z", "date_only": false, "value": "2026-06-17T16:17:04.911Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20190", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T17:14:11.061Z", "date_only": false, "value": "2026-06-17T17:14:11.061077Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20190", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-17T17:14:11.061Z", "date_only": false, "value": "2026-06-17T17:14:11.061077Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20190", "record": "FKIE_CVE-2026-20190", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-17T17:16:43Z", "date_only": false, "value": "2026-06-17T17:16:43Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6X4J-83F8-HHX2", "record": "GHSA-6X4J-83F8-HHX2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-17T17:16:43.130Z", "date_only": false, "value": "2026-06-17T17:16:43.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20190", "record": "FKIE_CVE-2026-20190", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-17T17:16:45.425Z", "date_only": false, "value": "2026-06-17T17:16:45.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20190", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T17:16:45.425Z", "date_only": false, "value": "2026-06-17T17:16:45.425Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20190", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T18:24:32.907Z", "date_only": false, "value": "2026-06-17T18:24:32.907358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "f1258046-cefc-48d3-9270-9227eb231098", "content": "CVE-2026-20190 - Cisco Identity Services Engine Information Disclosure Vulnerability\nCVE ID : CVE-2026-20190\n \n Published : June 17, 2026, 4:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attack...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724"}, {"timestamp": "2026-06-17T18:35:57Z", "date_only": false, "value": "2026-06-17T18:35:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6X4J-83F8-HHX2", "record": "GHSA-6X4J-83F8-HHX2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-17T18:35:57Z", "date_only": false, "value": "2026-06-17T18:35:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6X4J-83F8-HHX2", "record": "GHSA-6X4J-83F8-HHX2", "field": "modified"}, {"timestamp": "2026-06-17T21:00:00Z", "date_only": false, "value": "2026-06-17T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "0da1f01d-5db7-469e-a5ea-27e6d6f6cae1", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0772", "record": "CERTFR-2026-AVI-0772", "field": "last_revision_date"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0772", "record": "CERTFR-2026-AVI-0772", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-18T00:00:00Z", "date_only": false, "value": "2026-06-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0772", "record": "CERTFR-2026-AVI-0772", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-18T13:15:12.155Z", "date_only": false, "value": "2026-06-18T13:15:12.155261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvoim2u2j", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "dd1e53bf-1433-4481-9f75-ad211c77c982", "content": "\ud83d\udd17 CVE : CVE-2026-20181, CVE-2026-20190", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvoim2u2j"}, {"timestamp": "2026-06-19T06:52:57.624Z", "date_only": false, "value": "2026-06-19T06:52:57.624809Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0208", "record": "NCSC-2026-0208", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-19T06:52:57.624Z", "date_only": false, "value": "2026-06-19T06:52:57.624809Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0208", "record": "NCSC-2026-0208", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-19T06:52:57.624Z", "date_only": false, "value": "2026-06-19T06:52:57.624809Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0208", "record": "NCSC-2026-0208", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-19T13:19:13.090Z", "date_only": false, "value": "2026-06-19T13:19:13.090776Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775956143459982", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "1c6f353d-f5fd-4ecd-a8aa-893b96a9f886", "content": "Cisco Patches Critical Root RCE and Credential Theft Flaws in ISE\nCisco patched a critical root RCE vulnerability (CVE-2026-20181) and a high-severity information disclosure flaw (CVE-2026-20190) in its Identity Services Engine. These vulnerabilities allow authenticated root access or theft of hashed credentials.\n**Make sure your Cisco ISE and ISE-PIC systems are isolated from the internet and reachable only from trusted management networks. Apply the latest patches immediately (ISE 3.3 Patch 11, 3.4 Patch 6, or 3.5 Patch 3) and for the 3.5 command-execution fix, request the hotfix from Cisco TAC now. Don't wait for Patch 4 in August 2026.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/cisco-patches-critical-root-rce-and-credential-theft-flaws-in-ise-o-v-f-q-7/gD2P6Ple2L", "url": "https://infosec.exchange/users/beyondmachines1/statuses/116775956143459982"}, {"timestamp": "2026-06-19T15:02:23Z", "date_only": false, "value": "2026-06-19T15:02:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-19T17:19:44.985Z", "date_only": false, "value": "2026-06-19T17:19:44.985866Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116777915755287698", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "99b740f5-5768-4837-8090-857ced9c6448", "content": "New advisory. \nThis relates to critical CVE-2026-20181 and CVE-2026-20190 vulnerabilities, published on the 17th.\nCisco: CRITICAL: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "url": "https://infosec.exchange/users/AAKL/statuses/116777915755287698"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": true, "value": "2026-06-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-26370", "record": "CNVD-2026-26370", "field": "submitTime"}, {"timestamp": "2026-07-03T00:00:00Z", "date_only": true, "value": "2026-07-03", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-26370", "record": "CNVD-2026-26370", "field": "openTime"}, {"timestamp": "2026-07-06T19:20:30Z", "date_only": false, "value": "2026-07-06T19:20:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-06T19:20:30Z", "date_only": false, "value": "2026-07-06T19:20:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-06T19:20:33Z", "date_only": false, "value": "2026-07-06T19:20:33+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-07T17:30:38.424Z", "date_only": false, "value": "2026-07-07T17:30:38.424671Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879880216382355", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "08492bc7-b539-4dc4-a659-394e5ba8bbd9", "content": "If you missed this yesterday, Cisco posted this advisory on a critical vulnerability that was first published in June.\nCRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x #Cisco #infosec #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/116879880216382355"}, {"timestamp": "2026-07-13T20:07:38.803Z", "date_only": false, "value": "2026-07-13T20:07:38.803181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkim6vcw22u", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "deb42e0b-1cb5-40e0-9d0b-8e48d2d392db", "content": "\u300cCisco ISE\u300d\u306bRCE\u8106\u5f31\u6027 - \u7aef\u672b\u306e\u63a5\u7d9a\u306b\u5f71\u97ff\u3059\u308b\u304a\u305d\u308c\u3082\n\nCisco Systems\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u88fd\u54c1\u300cCisco Identity Services Engine\uff08ISE\uff09\u300d\u304a\u3088\u3073\u300cCisco ISE Passive Identity Connector\uff08ISE-PIC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u4fee\u6b63\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20181\u300d\u300cCVE-2026-20190\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u3044\u305a\u308c\u3082\u8106\u5f31\u6027\u306e\u60aa\u7528\u3084\u60c5\u5831\u516c\u958b\u306a\u3069\u306f\u78ba\u8a8d...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkim6vcw22u"}, {"timestamp": "2026-07-15T13:16:32.067Z", "date_only": false, "value": "2026-07-15T13:16:32.067346Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/07/patchtisdag-juli-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "record": "CVE-2026-20190", "field": "creation_timestamp", "uuid": "7e72b863-d74f-46f5-9516-d23beb0bd09b", "url": "https://www.cert.se/2026/07/patchtisdag-juli-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html"}, {"timestamp": "2026-09-25T16:41:47.623Z", "date_only": false, "value": "2026-09-25T16:41:47.623", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20190", "record": "FKIE_CVE-2026-20190", "field": "lastModified"}], "metrics": {"as_of": "2026-11-03T05:24:35.918Z", "anchors": {"origin": {"timestamp": "2026-06-17T16:00:00Z", "date_only": false, "value": "2026-06-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-17T16:00:00Z", "date_only": false, "value": "2026-06-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 11971475.918936, "hours": 3325.409977482222, "days": 138.55874906175924, "min_seconds": 11971475.918936, "max_seconds": 11971475.918936, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-17T16:00:00Z", "date_only": false, "value": "2026-06-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ISE-MULTI-G5WP8VV", "record": "CISCO-SA-ISE-MULTI-G5WP8VV", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T05:24:35.918Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}