# Cisco Identity Services Engine Software. Every CVE that names Cisco Identity Services Engine Software among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20241.md) `CVE-2026-20241` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Broken access control - [Cisco ISE REST API SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76426.md) `CVE-2026-76426` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Arbitrary File Deletion Vulnerability](https://agentprime.io/advisories/CVE-2026-76431.md) `CVE-2026-76431` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal - [Cisco ISE XML External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76427.md) `CVE-2026-76427` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: XML external entities (XXE) - [Cisco Identity Services Engine Certificate Reload Vulnerability](https://agentprime.io/advisories/CVE-2026-76447.md) `CVE-2026-76447` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass - [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20285.md) `CVE-2026-20285` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control - [Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20287.md) `CVE-2026-20287` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation - [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20286.md) `CVE-2026-20286` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control - [ISE information disclosure](https://agentprime.io/advisories/CVE-2026-20072.md) `CVE-2026-20072` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control - [Cisco Identity Services Engine External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76446.md) `CVE-2026-76446` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: XML external entities (XXE) - [ISE 802.1x Session Hijack Vulnerability](https://agentprime.io/advisories/CVE-2026-20071.md) `CVE-2026-20071` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 3.8 Low · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass - [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20300.md) `CVE-2026-20300` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Arbitrary File Write Vulnerability](https://agentprime.io/advisories/CVE-2026-76432.md) `CVE-2026-76432` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal - [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76448.md) `CVE-2026-76448` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2026-76434.md) `CVE-2026-76434` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal - [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-76444.md) `CVE-2026-76444` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass - [Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76451.md) `CVE-2026-76451` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20235.md) `CVE-2026-20235` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76449.md) `CVE-2026-76449` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76450.md) `CVE-2026-76450` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2026-20309.md) `CVE-2026-20309` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Cross-site scripting (XSS) - [Cisco ISE Profiler SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76428.md) `CVE-2026-76428` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-76433.md) `CVE-2026-76433` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal - [Cisco Identity Services Engine Event Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76439.md) `CVE-2026-76439` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass - [Cisco Identity Services Engine Authenticated Write Vulnerability](https://agentprime.io/advisories/CVE-2026-20282.md) `CVE-2026-20282` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-641 - [Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20283.md) `CVE-2026-20283` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection - [Cisco ISE SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76425.md) `CVE-2026-76425` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.6 High · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20284.md) `CVE-2026-20284` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Other injection - [Cisco ISE Arbitrary File Access Vulnerability](https://agentprime.io/advisories/CVE-2026-76424.md) `CVE-2026-76424` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal - [Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20247.md) `CVE-2026-20247` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection - [Cisco Identity Services Engine Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76460.md) `CVE-2026-76460` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.76 · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-648 - [Cisco Identity Services Engine RADIUS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20352.md) `CVE-2026-20352` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 8.6 High · Not analysed yet · Published 16 Sept 2026 · Tags: Memory corruption - [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20176.md) `CVE-2026-20176` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection - [Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20237.md) `CVE-2026-20237` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-20 - [Cisco ISE API Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76423.md) `CVE-2026-76423` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass - [Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20130.md) `CVE-2026-20130` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Other injection - [Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20192.md) `CVE-2026-20192` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control - [Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20194.md) `CVE-2026-20194` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-669 - [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20211.md) `CVE-2026-20211` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Insecure deserialization - [Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20234.md) `CVE-2026-20234` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials - [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20307.md) `CVE-2026-20307` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Insecure deserialization - [Cisco Identity Services Engine Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20305.md) `CVE-2026-20305` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection - [Cisco Identity Services Engine Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20306.md) `CVE-2026-20306` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection - [Cisco Identity Services Engine Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2026-20146.md) `CVE-2026-20146` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Path traversal - [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20190.md) `CVE-2026-20190` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: Broken access control - [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20181.md) `CVE-2026-20181` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2026 · Tags: Path traversal - [Cisco Identity Services Engine Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20193.md) `CVE-2026-20193` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: Broken access control - [Cisco Identity Services Engine Observable Response Discrepancy Vulnerability](https://agentprime.io/advisories/CVE-2026-20195.md) `CVE-2026-20195` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.3 Medium · Not analysed yet · Published 6 May 2026 · Tags: CWE-204 - [Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20136.md) `CVE-2026-20136` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.0 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: CWE-116 - [Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20180.md) `CVE-2026-20180` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2026 · Tags: Path traversal - [Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20186.md) `CVE-2026-20186` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection - [Cisco Identity Services Engine Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2026-20148.md) `CVE-2026-20148` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Path traversal - [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20147.md) `CVE-2026-20147` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection - [Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20132.md) `CVE-2026-20132` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Cross-site scripting (XSS) - [Cisco Identity Services Engine Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2026-20047.md) `CVE-2026-20047` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Cross-site scripting (XSS) - [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2026-20076.md) `CVE-2026-20076` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Cross-site scripting (XSS) - [Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20029.md) `CVE-2026-20029` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.9 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: XML external entities (XXE) - [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2025-20304.md) `CVE-2025-20304` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 5.4 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Cross-site scripting (XSS) - [A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device.](https://agentprime.io/advisories/CVE-2025-20305.md) `CVE-2025-20305` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.3 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-1220 - [Cross-site scripting in Cisco Identity Services Engine Software](https://agentprime.io/advisories/CVE-2025-20289.md) `CVE-2025-20289` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 4.8 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Cross-site scripting (XSS) Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .