# CVE-2026-20352

Crafted RADIUS requests can cause DoS on Cisco ISE nodes

- Page: https://www.vulneraibility.com/cve/CVE-2026-20352
- CVSS: 8.6
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.57% (percentile 47.4)
- CISA SSVC: exploitation none, automatable yes, technical impact partial (assessed 2026-09-17)
- Weakness: CWE-119
- Published: 2026-09-16

## Affected versions

- Cisco Cisco Identity Services Engine Software: affected 3.2.0; 3.2.0 p1; 3.2.0 p2; 3.3.0; 3.2.0 p3; 3.2.0 p4; 3.2.0 p5; 3.2.0 p6; 3.3 Patch 2; 3.3 Patch 1; 3.3 Patch 3; 3.4.0; 3.2.0 p7; 3.3 Patch 4; 3.4 Patch 1; 3.3 Patch 5; 3.3 Patch 6; 3.4 Patch 2; 3.3 Patch 7; 3.4 Patch 3; 3.5.0; 3.4 Patch 4; 3.3 Patch 8; 3.2 Patch 8; 3.5 Patch 1; 3.3 Patch 9; 3.2 Patch 9; 3.4 Patch 5; 3.5 Patch 3; 3.5 Patch 2; 3.3 Patch 10; 3.3 Patch 11; 3.4 Patch 6; 3.2 Patch 10

A version outside these ranges is not a statement that it is unaffected.

## Impact

Unauthenticated remote attacker can send crafted RADIUS requests to crash an ISE node, causing authentication outages and loss of network access for endpoints.

## Action

Immediate action required

## Recommendation

Restrict RADIUS access to trusted sources, apply Cisco mitigations, patch when vendor update is released.

## References

- [other] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-RADIUS-dos-wR3hYPMw

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.