Cisco has released security updates to address two (2) critical vulnerabilities in its Identity Services Engine (ISE) that could allow remote attackers to execute arbitrary commands, escalate privileges, and modify system configurations on affected devices. The first vulnerability, tracked as CVE-2025-20124 (CVSS 9.9/10), is an insecure Java deserialization flaw within an API of Cisco ISE, which enables authenticated remote attackers to execute commands as the root user by sending a crafted serialized Java object. The second vulnerability, tracked as CVE-2025-20125 (CVSS 9.1/10), is an authorization bypass flaw that allows attackers with valid read-only credentials to obtain sensitive information, modify node configurations, and restart affected nodes by sending a malicious HTTP request to a specific API endpoint. These vulnerabilities are independent of each other, and there are currently no available workarounds. Cisco has addressed the flaws in its latest software releases, with fixes implemented in ISE versions 3.1P10, 3.2P7, and 3.3P4, while version 3.4 is not vulnerable. While Cisco has stated that there is no evidence of active exploitation, CTIX analysts strongly advise users to update their systems immediately to mitigate potential threats.