CVE-2026-76447

Cisco ISE and Cisco ISE-PIC contain a vulnerability in the OCSP responder caused by missing authentication on a specific function. An unauthenticated, remote attacker can send a crafted request to trigger an administrative reload of the OCSP responder certificate and key material on demand. The i...

CVE-2026-76447 Cisco Identity Services Engine Certificate Reload Vulnerability

A vulnerability in the Online Certificate Status Protocol OCSP responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificate and key material. This vulnerability is due to missing authentication on a...

EUVD-2026-81165

A vulnerability in the Online Certificate Status Protocol OCSP responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificate and key material. This vulnerability is due to missing authentication on a...

CVE-2026-76447 Cisco Identity Services Engine Certificate Reload Vulnerability

A vulnerability in the Online Certificate Status Protocol OCSP responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificate and key material. This vulnerability is due to missing authentication on a...

CVE-2026-20287

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by improper privilege management vulnerabilities (grouped under CWE-269 ), discovered internally during a security hardening review. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L...

CVE-2026-20285 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-20287 Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

EUVD-2026-81163

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

EUVD-2026-81164

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-20285

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an authorization bypass in the web-based management interface , caused by the lack of server-side validation of Administrator permissions. An authenticated, remote attacker holding valid Administrator ...

CVE-2026-20285 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-si...

CVE-2026-20286 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

EUVD-2026-81162

A vulnerability in the web-based management interface of Cisco Identify Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

CVE-2026-20072 ISE information disclosure

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

EUVD-2026-81160

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

CVE-2026-20072

CVE-2026-20072 is an information disclosure vulnerability in the web-based management interface of Cisco ISE . Certain files in the interface lack proper authorization enforcement, allowing an authenticated remote attacker with administrative privileges and management rights over network users to...

CVE-2026-20072 ISE information disclosure

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that are outside the security group that the attacker is assigned to. This vulnerability exists because certain files lack proper...

CVE-2026-76446 Cisco Identity Services Engine External Entity Injection Vulnerability

A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This vulnerability is due to improper restriction of XML external entity references. An attacker could exploit th...

CVE-2026-76446

CVE-2026-76446 affects an API in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC , caused by improper restriction of XML external entity (XXE) references . An authenticated, remote attacker can send a crafted request to read specific files on the underlying operating system that the affect...

EUVD-2026-81159

A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This vulnerability is due to improper restriction of XML external entity references. An attacker could exploit th...