Advisories · Technology

Cisco Identity Services Engine Software.

Every CVE that names Cisco Identity Services Engine Software among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20241 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 4 Nov 2026
CVE-2026-76426 CVE record

CVSS 4.9 Medium

Cisco ISE REST API SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76431 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Deletion Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76427 CVE record

CVSS 4.9 Medium

Cisco ISE XML External Entity Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- XML external entities (XXE)
Not analysed yet 16 Sept 2026
CVE-2026-76447 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Certificate Reload Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-20285 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-20287 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Privilege escalation
Not analysed yet 16 Sept 2026
CVE-2026-20286 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-20072 CVE record

CVSS 4.9 Medium

ISE information disclosure
- Cisco Identity Services Engine Software
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-76446 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine External Entity Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- XML external entities (XXE)
Not analysed yet 16 Sept 2026
CVE-2026-20071 CVE record

CVSS 3.8 Low

ISE 802.1x Session Hijack Vulnerability
- Cisco Identity Services Engine Software
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-20300 CVE record

CVSS 7.1 High

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76432 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Write Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76448 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76434 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Read Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76444 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-76451 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-20235 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76449 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76450 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-20309 CVE record

CVSS 6.1 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2026
CVE-2026-76428 CVE record

CVSS 4.9 Medium

Cisco ISE Profiler SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76433 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76439 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Event Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-20282 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Authenticated Write Vulnerability
- Cisco Identity Services Engine Software
- CWE-641
Not analysed yet 16 Sept 2026
CVE-2026-20283 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 16 Sept 2026
CVE-2026-76425 CVE record

CVSS 7.6 High

Cisco ISE SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-20284 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Other injection
Not analysed yet 16 Sept 2026
CVE-2026-76424 CVE record

CVSS 7.2 High

Cisco ISE Arbitrary File Access Vulnerability
- Cisco Identity Services Engine Software
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-20247 CVE record

CVSS 7.5 High

Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76460 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco Identity Services Engine Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-648
Not analysed yet 16 Sept 2026
CVE-2026-20352 CVE record

CVSS 8.6 High

Cisco Identity Services Engine RADIUS Denial of Service Vulnerability
- Cisco Identity Services Engine Software
- Memory corruption
Not analysed yet 16 Sept 2026
CVE-2026-20176 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 16 Sept 2026
CVE-2026-20237 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-20
Not analysed yet 16 Sept 2026
CVE-2026-76423 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco ISE API Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-20130 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Other injection
Not analysed yet 16 Sept 2026
CVE-2026-20192 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-20194 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-669
Not analysed yet 16 Sept 2026
CVE-2026-20211 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Insecure deserialization
Not analysed yet 16 Sept 2026
CVE-2026-20234 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Hard-coded credentials
Not analysed yet 16 Sept 2026
CVE-2026-20307 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Insecure deserialization
Not analysed yet 16 Sept 2026
CVE-2026-20305 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
Not analysed yet 16 Sept 2026
CVE-2026-20306 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
Not analysed yet 16 Sept 2026
CVE-2026-20146 CVE record

CVSS 5.5 Medium

Cisco Identity Services Engine Path Traversal Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 15 Jul 2026
CVE-2026-20190 CVE record

CVSS 7.5 High

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 17 Jun 2026
CVE-2026-20181 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 17 Jun 2026
CVE-2026-20193 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Broken access control
Not analysed yet 6 May 2026
CVE-2026-20195 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Observable Response Discrepancy Vulnerability
- Cisco Identity Services Engine Software
- CWE-204
Not analysed yet 6 May 2026
CVE-2026-20136 CVE record

CVSS 6.0 Medium

Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability
- Cisco Identity Services Engine Software
- CWE-116
Not analysed yet 15 Apr 2026
CVE-2026-20180 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Path traversal
Not analysed yet 15 Apr 2026
CVE-2026-20186 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Command injection
Not analysed yet 15 Apr 2026
CVE-2026-20148 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Path Traversal Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 15 Apr 2026
CVE-2026-20147 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
Not analysed yet 15 Apr 2026
CVE-2026-20132 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 15 Apr 2026
CVE-2026-20047 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 15 Jan 2026
CVE-2026-20076 CVE record

CVSS 4.8 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 15 Jan 2026
CVE-2026-20029 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- XML external entities (XXE)
Not analysed yet 7 Jan 2026
CVE-2025-20304 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 5 Nov 2025
CVE-2025-20305 CVE record

CVSS 4.3 Medium

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device.
- Cisco Identity Services Engine Software
- CWE-1220
Not analysed yet 5 Nov 2025
CVE-2025-20289 CVE record

CVSS 4.8 Medium

Cross-site scripting in Cisco Identity Services Engine Software
- Cisco Identity Services Engine Software
- Cross-site scripting (XSS)
Not analysed yet 5 Nov 2025