It's worth noting that this vulnerability was first published over two months ago, and it appears Cisco has since released three separate patches for ISE 2.6. There's no indication in release notes that this issue has been addressed for 2.6, which is still listed as the recommended release over at Cisco downloads. Has anyone received any information regarding this particular bug?