CISCO: MAXIMUM-SEVERITY ISE RCE FLAWS NOW EXPLOITED IN ATTACKS

Summary from the TLDR InfoSec newsletter

Three critical unauthenticated RCE vulnerabilities in Cisco ISE (CVE-2025-20281, CVE-2025-20282, and CVE-2025-20337) are now being actively exploited in the wild, requiring immediate patching to ISE 3.3 Patch 7 or 3.4 Patch 2.