WATCH OUT, ANOTHER MAX-SEVERITY, MAKE-ME-ROOT CISCO BUG ON THE LOOSE

Summary from the TLDR InfoSec newsletter

Cisco patched a critical 10/10 severity bug (CVE-2025-20337) in its Identity Services Engine. The bug allowed unauthenticated remote attackers to execute arbitrary code with root privileges. Due to insufficient input validation, the vulnerability affects ISE releases 3.3 and 3.4. No workarounds exist. Immediate patching is essential, as exploits are expected soon.