{"metadata": {"vulnerability": "CVE-2026-20192", "count": 31, "kinds": {"milestone": 8, "sighting": 6, "kev": 0, "other": 17}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0382", "record": "NCSC-2026-0382", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.395Z", "date_only": false, "value": "2025-10-08T11:59:15.395Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20192", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": true, "value": "2026-09-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-16T16:03:14Z", "date_only": false, "value": "2026-09-16T16:03:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-16T16:04:08Z", "date_only": false, "value": "2026-09-16T16:04:08+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-16T20:07:00.603Z", "date_only": false, "value": "2026-09-16T20:07:00.603Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20192", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T20:07:00.603Z", "date_only": false, "value": "2026-09-16T20:07:00.603Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20192", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T20:17:21Z", "date_only": false, "value": "2026-09-16T20:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M52C-GWQ5-XCHJ", "record": "GHSA-M52C-GWQ5-XCHJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T20:17:21.900Z", "date_only": false, "value": "2026-09-16T20:17:21.900", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20192", "record": "FKIE_CVE-2026-20192", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T21:32:45Z", "date_only": false, "value": "2026-09-16T21:32:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M52C-GWQ5-XCHJ", "record": "GHSA-M52C-GWQ5-XCHJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-16T21:32:45Z", "date_only": false, "value": "2026-09-16T21:32:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M52C-GWQ5-XCHJ", "record": "GHSA-M52C-GWQ5-XCHJ", "field": "modified"}, {"timestamp": "2026-09-16T22:08:18.303Z", "date_only": false, "value": "2026-09-16T22:08:18.303857Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5nrwkb22b", "record": "CVE-2026-20192", "field": "creation_timestamp", "uuid": "b56927c2-da71-4e0d-ae24-5c456080f0b1", "content": "\ud83d\udea8 CVE-2026-20192 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20192\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5nrwkb22b"}, {"timestamp": "2026-09-16T22:30:04.834Z", "date_only": false, "value": "2026-09-16T22:30:04.834364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo6uqakxh24", "record": "CVE-2026-20192", "field": "creation_timestamp", "uuid": "1ab59f6d-2231-4595-905d-b648fe12012e", "content": "CVE-2026-20192 - cisco identity services engine software\nThe Cisco Identity Services Engine and its Passive Identity Connector have been found to let users bypass normal permission checks. This could let someone view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo6uqakxh24"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "last_revision_date"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-17T00:00:00Z", "date_only": false, "value": "2026-09-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1197", "record": "CERTFR-2026-AVI-1197", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-17T04:32:56.458Z", "date_only": false, "value": "2026-09-17T04:32:56.458179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mvot5kn3px2r", "record": "CVE-2026-20192", "field": "creation_timestamp", "uuid": "a39eef56-c27a-46f1-a4a6-3de4290df2e4", "content": "\ud83d\udd34 EXPLOITED\n\nCisco Identity Services Engine has a critical flaw (CVSS 10.0, CVE-2026-20192) that Cisco says is already being exploited.\nOne of six bugs fixed in Cisco's Sept 2026 ISE hardening release. Releases 3.0-3.5 affected.\nPatch now.", "url": "https://bsky.app/profile/suriq.io/post/3mvot5kn3px2r"}, {"timestamp": "2026-09-17T09:24:38.495Z", "date_only": false, "value": "2026-09-17T09:24:38.495978Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0382", "record": "NCSC-2026-0382", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-17T09:24:38.495Z", "date_only": false, "value": "2026-09-17T09:24:38.495978Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0382", "record": "NCSC-2026-0382", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-17T09:24:38.495Z", "date_only": false, "value": "2026-09-17T09:24:38.495978Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0382", "record": "NCSC-2026-0382", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T12:15:02.871Z", "date_only": false, "value": "2026-09-17T12:15:02.871080Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382", "record": "CVE-2026-20192", "field": "creation_timestamp", "uuid": "f7d057ce-7316-40d5-857e-e71d08dc15f5", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382"}, {"timestamp": "2026-09-17T20:15:17.582Z", "date_only": false, "value": "2026-09-17T20:15:17.582505Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-021-vulnerabilities-impacting-cisco-identity-services-engine-ise-cisco-ise-passive-identity-connector-ise-pic-cve-2026-20192-cve-2026-76423-cve-2026-76460", "record": "CVE-2026-20192", "field": "creation_timestamp", "uuid": "0a8ce9f3-e60d-49ac-9f38-30fb45f08e89", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-021-vulnerabilities-impacting-cisco-identity-services-engine-ise-cisco-ise-passive-identity-connector-ise-pic-cve-2026-20192-cve-2026-76423-cve-2026-76460"}, {"timestamp": "2026-09-18T01:00:34.799Z", "date_only": false, "value": "2026-09-18T01:00:34.799789Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382", "record": "CVE-2026-20192", "field": "creation_timestamp", "uuid": "a806350d-ab5f-4708-9f24-d5a4a047d540", "content": "Cisco heeft 21 kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE) en Cisco ISE Passive Identity Connector (ISE-PIC). De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Cisco ISE en ISE-PIC, waaronder mogelijkheden voor niet-geauthenticeerde en laaggeprivilegieerde kwaadwillenden om via netwerktoegang ongeautoriseerde acties uit te voeren. De kwetsbaarheden hebben CVSS-scores vari\u00ebrend van middel tot kritiek. Van de in totaal 21 kwetsbaarheden zijn 13 als kritiek aangemerkt. Op basis van de door Cisco gepubliceerde CVSS-scores kunnen vier kwetsbaarheden zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het omzeilen van authenticatie- en autorisatiecontroles, het verkrijgen en wijzigen van gevoelige configuratie- en identiteitsgegevens, het uitvoeren van willekeurige code of commando's met rootrechten, SQL-injectie, het uitlezen van bestanden en het verstoren van de beschikbaarheid van getroffen systemen. Sommige kwetsbaarheden vereisen voorafgaande administratieve toegangsrechten of een specifieke configuratie, terwijl andere volledig op afstand en zonder authenticatie kunnen worden misbruikt.\n\nVan de 13 kwetsbaarheden die als kritiek zijn aangemerkt, hebben meerdere een CVSS-score van 9,8 of hoger. Vier kwetsbaarheden, CVE-2026-20130, CVE-2026-20192, CVE-2026-76423 en CVE-2026-76460, hebben een CVSS-score van 10,0. \n\nDe kwetsbaarheid met kenmerk CVE-2026-76423 betreft een kwetsbaarheid in de REST API waarmee een niet-geauthenticeerde kwaadwillende administratieve toegang kan verkrijgen tot Cisco ISE en ISE-PIC. \n\nDe kwetsbaarheid met kenmerk CVE-2026-76460 betreft een authenticatieomzeiling in een API van Cisco ISE en ISE-PIC waarmee een niet-geauthenticeerde kwaadwillende toegang tot het getroffen systeem kan verkrijgen. Cisco meldt dat deze kwetsbaarheid actief wordt misbruikt. Na succesvolle exploitatie kunnen kwaadwillenden volgens Cisco commando's met rootrechten uitvoeren. \n\nDe kwetsbaarheden met kenmerk CVE-2026-20130 en CVE-2026-20192 betreffen door Cisco gegroepeerde kwetsbaarheden op het gebied van respectievelijk onvoldoende neutralisatie van invoer en onjuiste toegangscontrole. Cisco heeft voor deze hardening-release meerdere onderliggende kwetsbaarheden per CWE-klasse onder \u00e9\u00e9n CVE-ID samengebracht. De CVSS-score vertegenwoordigt daarbij de hoogst scorende onderliggende kwetsbaarheid.\n\nHet NCSC adviseert om de beveiligingsupdates voor de kritieke kwetsbaarheden met voorrang toe te passen.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0382"}, {"timestamp": "2026-09-18T03:55:53.856Z", "date_only": false, "value": "2026-09-18T03:55:53.856937Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20192", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T03:55:53.856Z", "date_only": false, "value": "2026-09-18T03:55:53.856937Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20192", "record": "FKIE_CVE-2026-20192", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T13:41:16.609Z", "date_only": false, "value": "2026-09-18T13:41:16.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20192", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T13:41:16.609Z", "date_only": false, "value": "2026-09-18T13:41:16.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20192", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-28T13:02:06.703Z", "date_only": false, "value": "2026-09-28T13:02:06.703", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20192", "record": "FKIE_CVE-2026-20192", "field": "lastModified"}], "metrics": {"as_of": "2026-11-02T17:09:53.068Z", "anchors": {"origin": {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 4064993.068393, "hours": 1129.1647412202778, "days": 47.04853088417824, "min_seconds": 4064993.068393, "max_seconds": 4064993.068393, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-16T16:00:00Z", "date_only": false, "value": "2026-09-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-ISE-XU5EWX5T", "record": "CISCO-SA-HARDENING-ISE-XU5EWX5T", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T17:09:53.068Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}