# Cisco ISE Passive Identity Connector.

Every CVE that names Cisco ISE Passive Identity Connector among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20241.md)
  `CVE-2026-20241` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Broken access control
- [Cisco ISE REST API SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76426.md)
  `CVE-2026-76426` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection
- [Cisco Identity Services Engine Arbitrary File Deletion Vulnerability](https://agentprime.io/advisories/CVE-2026-76431.md)
  `CVE-2026-76431` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal
- [Cisco ISE XML External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76427.md)
  `CVE-2026-76427` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine Certificate Reload Vulnerability](https://agentprime.io/advisories/CVE-2026-76447.md)
  `CVE-2026-76447` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Cisco Identity Services Engine Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20285.md)
  `CVE-2026-20285` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20287.md)
  `CVE-2026-20287` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation
- [Cisco Identity Services Engine External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76446.md)
  `CVE-2026-76446` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: XML external entities (XXE)
- [Cisco Identity Services Engine Arbitrary File Write Vulnerability](https://agentprime.io/advisories/CVE-2026-76432.md)
  `CVE-2026-76432` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal
- [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76448.md)
  `CVE-2026-76448` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection
- [Cisco Identity Services Engine Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2026-76434.md)
  `CVE-2026-76434` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal
- [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-76444.md)
  `CVE-2026-76444` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76451.md)
  `CVE-2026-76451` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection
- [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76449.md)
  `CVE-2026-76449` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection
- [Cisco Identity Services Engine SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76450.md)
  `CVE-2026-76450` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection
- [Cisco ISE Profiler SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76428.md)
  `CVE-2026-76428` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: SQL injection
- [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-76433.md)
  `CVE-2026-76433` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Path traversal
- [Cisco Identity Services Engine Event Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-76439.md)
  `CVE-2026-76439` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Cisco Identity Services Engine Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76460.md)
  `CVE-2026-76460` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.76 · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-648
- [Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20237.md)
  `CVE-2026-20237` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-20
- [Cisco ISE API Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76423.md)
  `CVE-2026-76423` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20130.md)
  `CVE-2026-20130` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Other injection
- [Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20192.md)
  `CVE-2026-20192` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20194.md)
  `CVE-2026-20194` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-669
- [Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20234.md)
  `CVE-2026-20234` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Hard-coded credentials
- [Cisco Identity Services Engine Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20305.md)
  `CVE-2026-20305` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco Identity Services Engine Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20306.md)
  `CVE-2026-20306` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco Identity Services Engine Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2026-20146.md)
  `CVE-2026-20146` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Path traversal
- [Cisco Identity Services Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20190.md)
  `CVE-2026-20190` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: Broken access control
- [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20181.md)
  `CVE-2026-20181` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2026 · Tags: Path traversal
- [Cisco Identity Services Engine Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2026-20148.md)
  `CVE-2026-20148` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Path traversal
- [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20147.md)
  `CVE-2026-20147` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy](https://agentprime.io/advisories/CVE-2025-20331.md)
  `CVE-2025-20331` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Cross-site scripting (XSS)
- [Cisco ISE API Unauthenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20337.md)
  `CVE-2025-20337` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.74 · Not analysed yet · Published 16 Jul 2025 · Tags: Other injection
- [Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-20125.md)
  `CVE-2025-20125` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 5 Feb 2025 · Tags: Broken access control
- [Cisco Identity Services Engine Java Deserialization Vulnerability](https://agentprime.io/advisories/CVE-2025-20124.md)
  `CVE-2025-20124` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.19 · Not analysed yet · Published 5 Feb 2025 · Tags: Insecure deserialization

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-ise-passive-identity-connector>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-ise-passive-identity-connector/>. Everything for agents: <https://agentprime.io/llms.txt>.