“`html

Cisco has issued updates to rectify two critical-severity security vulnerabilities in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) that may allow an unauthenticated intruder to carry out arbitrary commands with root user privileges.

The vulnerabilities, designated with the CVE identifiers CVE-2025-20281 and CVE-2025-20282, both hold a CVSS rating of 10.0. A summary of the issues is

“`