Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass

Cisco Identity Services Engine contains an authentication bypass caused by insufficient authentication control on an API endpoint, letting unauthenticated remote attackers gain unauthorized access, exploit requires crafted request to API endpoint. id: CVE-2026-76460 info: name: Cisco Identity...

EUVD-2026-123058

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

CVE-2026-20183

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

CVE-2026-20183 ISE Authorization Bypass vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An...

CVE-2026-20183

A vulnerability exists in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) . The issue stems from a lack of server-side validation of Administrator permissions , which could allow an authenticated, remote attacker to mod...

PT-2026-144858

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A flaw in the web-based management interface allows an authenticated remote attacker to modify configuration elements on a device. The issue stems from insufficient...

CVE-2026-20241

A vulnerability in the authorization mechanism of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker...

CVE-2026-20241 Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the authorization mechanism of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker...

CVE-2026-20241

A vulnerability exists in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) . Due to improper authorization checks , an unauthenticated, remote attacker can send a crafted request to an affected device to bypass authorization. A...

EUVD-2026-116973

A vulnerability in the authorization mechanism of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker...

CVE-2026-20241: Cisco: A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity…

A vulnerability in the authorization mechanism of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate. This vulnerability is due to improper authorization checks. An attacker...

Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

On November 4, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco UCS Central Software Remote Code Execution Vulnerability...

Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-hardening-ise-XU5EwX5T)

According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC engineering teams have conducted a...

Cisco Identity Services Engine Auth Bypass RCE

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Cisco Identity Services Engine File Read

The vulnerability of the Cisco Identity Services Engine ISE’s software interface and the Cisco ISE Passive Identity Connector ISE-PIC’s virtual authentication data collection device is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could...

Cisco ISE Policy Management SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an...

Cisco ISE Policy Runtime Repository Table Unauthorized Access

The vulnerability of the Policy Runtime Repository Table PRRT service on the Cisco Identity Services Engine ISE network management platform, as well as the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication device, is related to the absence of authentication for a critical...

Cisco ISE Policy Management SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a...

Cisco Identity Services Engine SQL Injection

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a remote attacker to execute arbitrary SQL queries...

Cisco Identity Services Engine (cisco-sa-ise-multiauth-bypass-sgD2HbL4)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. CVE-2026-76444 - A...