References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 https://nvd.nist.gov/vuln/detail/CVE-2025-20281 https://www.thezdi.com/blog/2025/7/24/cve-2025-20281-cisco-ise-api-unauthenticated-remote-code-execution-vulnerability https://github.com/abrewer251/CVE-2025-20281-2-Cisco-ISE-RCE https://nvd.nist.gov/vuln/detail/CVE-2025-20281 https://www.cve.org/CVERecord?id=CVE-2025-20281 https://arcticwolf.com/resources/blog/cve-2025-20281-cve-2025-20282/ https://www.tenable.com/cve/CVE-2025-20281 https://thehackernews.com/2025/06/critical-rce-flaws-in-cisco-ise-and-ise.html https://community.cisco.com/t5/security-knowledge-base/cisco-ise-related-vulnerability-cve-2025-20281-amp-20282-amp/ta-p/5302518
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Cisco IOS XE Software 命令注入漏洞