Cisco has recently patched a critical command injection vulnerability in its Identity Services Engine (ISE), a network access control solution widely used in enterprise environments. This vulnerability, tracked as CVE-2024-20469, allows attackers with existing administrator privileges to escalate their access to root, granting them full control over the system. The issue stems from inadequate validation of user-supplied input in certain CLI commands, which local attackers can exploit by submitting malicious commands. This flaw is considered low complexity, requiring no user interaction, making it particularly concerning. Although Cisco has released the necessary security updates, proof-of-concept (PoC) exploit code is already available to the public, raising the potential risk of future exploitation. Fortunately, Cisco has not observed any evidence of attackers actively exploiting this vulnerability in the wild. In addition to this critical patch, Cisco warned of a backdoor account in its Smart Licensing Utility Windows software, which has also been addressed. This backdoor could have allowed attackers to log into unpatched systems with administrative privileges. The patch for CVE-2024-20469 follows a series of other critical security updates from Cisco, including fixes for an Integrated Management Controller (IMC) vulnerability (CVE-2024-20295) and a vulnerability in its Security Email Gateway (SEG) appliances (CVE-2024-20401), both of which also allowed for privilege escalation and could be exploited to crash systems or add rogue users. CTIX analysts urge users to install the updates immediately to secure their systems from potential exploitation.