Advisories · Technology

Cisco ISE Passive Identity Connector.

Every CVE that names Cisco ISE Passive Identity Connector among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-20241 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 4 Nov 2026
CVE-2026-76426 CVE record

CVSS 4.9 Medium

Cisco ISE REST API SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76431 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Deletion Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76427 CVE record

CVSS 4.9 Medium

Cisco ISE XML External Entity Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- XML external entities (XXE)
Not analysed yet 16 Sept 2026
CVE-2026-76447 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Certificate Reload Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-20285 CVE record

CVSS 4.3 Medium

Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-20287 CVE record

CVSS 6.5 Medium

Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Privilege escalation
Not analysed yet 16 Sept 2026
CVE-2026-76446 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine External Entity Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- XML external entities (XXE)
Not analysed yet 16 Sept 2026
CVE-2026-76432 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Write Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76448 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76434 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Arbitrary File Read Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76444 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-76451 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76449 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76450 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76428 CVE record

CVSS 4.9 Medium

Cisco ISE Profiler SQL Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- SQL injection
Not analysed yet 16 Sept 2026
CVE-2026-76433 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 16 Sept 2026
CVE-2026-76439 CVE record

CVSS 5.3 Medium

Cisco Identity Services Engine Event Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-76460 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco Identity Services Engine Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-648
Not analysed yet 16 Sept 2026
CVE-2026-20237 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-20
Not analysed yet 16 Sept 2026
CVE-2026-76423 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco ISE API Authentication Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Authentication bypass
Not analysed yet 16 Sept 2026
CVE-2026-20130 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Other injection
Not analysed yet 16 Sept 2026
CVE-2026-20192 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 16 Sept 2026
CVE-2026-20194 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- CWE-669
Not analysed yet 16 Sept 2026
CVE-2026-20234 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Hard-coded credentials
Not analysed yet 16 Sept 2026
CVE-2026-20305 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
Not analysed yet 16 Sept 2026
CVE-2026-20306 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Command Injection Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
Not analysed yet 16 Sept 2026
CVE-2026-20146 CVE record

CVSS 5.5 Medium

Cisco Identity Services Engine Path Traversal Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 15 Jul 2026
CVE-2026-20190 CVE record

CVSS 7.5 High

Cisco Identity Services Engine Information Disclosure Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 17 Jun 2026
CVE-2026-20181 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 17 Jun 2026
CVE-2026-20148 CVE record

CVSS 4.9 Medium

Cisco Identity Services Engine Path Traversal Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Path traversal
Not analysed yet 15 Apr 2026
CVE-2026-20147 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Identity Services Engine Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Command injection
Not analysed yet 15 Apr 2026
CVE-2025-20331 CVE record

CVSS 5.4 Medium

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Cross-site scripting (XSS)
Not analysed yet 6 Aug 2025
CVE-2025-20337 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Other injection
Not analysed yet 16 Jul 2025
CVE-2025-20125 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Broken access control
Not analysed yet 5 Feb 2025
CVE-2025-20124 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cisco Identity Services Engine Java Deserialization Vulnerability
- Cisco Identity Services Engine Software
- Cisco ISE Passive Identity Connector
- Insecure deserialization
Not analysed yet 5 Feb 2025