Secuno
ENNL
Book demo

CVE-2026-20352

8.6 HIGHEPSS 0.40%
  1. Published16 Sept 2026

Description

A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker could exploit this vulnerability by sending a crafted RADIUS request directly to an affected device. A successful exploit could allow the attacker to cause the ISE node to become unavailable. For single node deployments in that condition, endpoints that have not already authenticated would be unable to access the network until the node comes back up on its own.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeChanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-937389.9
A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the…
CVE-2026-920548.8
Privilege escalation in the Memory component. This vulnerability was fixed in Firefox…
CVE-2026-910039.1
A flaw has been found in D-Link DI-8300 16.07. The affected element is the function…
CVE-2026-910019.9
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function…
CVE-2026-907078.3
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function…
CVE-2026-906939.9
A flaw has been found in D-Link DIR-878 120B05. This impacts the function…

Frequently asked

Is CVE-2026-20352 being actively exploited?

CVE-2026-20352 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.40%.

How severe is CVE-2026-20352?

CVE-2026-20352 has a CVSS 3.1 base score of 8.6, rated high. EPSS estimates a 0.40% probability of exploitation.

How do I fix CVE-2026-20352?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-20352 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.