NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE)
view advisory published 2026-09-17
Cisco heeft 21 kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE) en Cisco ISE Passive Identity Connector (ISE-PIC).
01
describes (21)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-76460US | critical10.0OT critical | KEV | ||
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.
This vulnerability is due to insuffic… | ||||
| CVE-2026-76428US | medium4.9 | — | ||
A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database.
This… | ||||
| CVE-2026-76427US | medium4.9 | — | ||
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device.
Th… | ||||
| CVE-2026-76426US | medium4.9 | — | ||
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database.
Th… | ||||
| CVE-2026-76425US | high7.6 | — | ||
A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database.
This vulnerability is due t… | ||||
| CVE-2026-76424US | high7.2 | — | ||
A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device.
This vulnerability is due to… | ||||
| CVE-2026-20287US | medium6.5 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) enginee… | ||||
| CVE-2026-20284US | critical9.1 | — | ||
A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks.
This vulnerability is due to insufficient valida… | ||||
| CVE-2026-20283US | medium6.5 | — | ||
A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system. … | ||||
| CVE-2026-20282US | medium4.9 | — | ||
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device.
This vulnerability is… | ||||
| CVE-2026-76423US | critical10.0 | — | ||
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device.
This vulnerab… | ||||
| CVE-2026-20237US | critical9.1 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engine… | ||||
| CVE-2026-20211US | critical9.1 | — | ||
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this v… | ||||
| CVE-2026-20194US | critical9.1 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engine… | ||||
| CVE-2026-20192US | critical10.0 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) enginee… | ||||
| CVE-2026-20176US | critical9.1 | — | ||
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this v… | ||||
| CVE-2026-20130US | critical10.0 | — | ||
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engine… | ||||
| CVE-2026-20307US | critical9.9 | — | ||
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of… | ||||
| CVE-2026-20306US | critical9.1 | — | ||
A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and e… | ||||
| CVE-2026-20305US | critical9.1 | — | ||
A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating syst… | ||||
showing 20 of 21
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan