Alleged sale of Cisco ISE Pre-auth Remote Code Execution (0day) Exploit

⚠ Disclaimer
This report includes actual screenshots and/or text that may include unredacted personally identifiable information (PII) gathered from publicly available sources. The sensitive information presented within this report is intended solely for cybersecurity awareness and threat intelligence purposes. Dark Web Informer explicitly condemns unauthorized access, distribution, or misuse of the personal data displayed or referenced here. Users must treat exposed data responsibly and ethically.

📌 Overview

Threat actor skart7 has posted a listing offering a zero-day remote code execution (RCE) exploit targeting Cisco Identity Services Engine (ISE) running on Linux. The exploit is advertised as pre-authentication, requiring no user interaction or credentials, and results in root access upon successful use. Compatibility with default configurations is claimed, suggesting wide applicability to vulnerable deployments.

📊 Key Details