CVE-2026-76425

Cisco ISE (Identity Services Engine) contains a SQL injection vulnerability in its APIs. The root cause is insufficient validation of certain parameters that are concatenated directly into an SQL query. An authenticated, remote attacker with administrative credentials can send a crafted request c...

EUVD-2026-81134

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are concatenated directly into an SQL query. An attacker could...

CVE-2026-76425 Cisco ISE SQL Injection Vulnerability

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are concatenated directly into an SQL query. An attacker could...

CVE-2026-76425 Cisco ISE SQL Injection Vulnerability

A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database. This vulnerability is due to insufficient validation of certain parameters that are concatenated directly into an SQL query. An attacker could...

CVE-2026-20334 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

EUVD-2026-81132

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls. An attacker could exploit this vulnerability by sending crafted input to ...

EUVD-2026-81133

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20334 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20284

CVE-2026-20284 affects the SXP REST API component of Cisco Identity Services Engine (ISE) . The root cause is insufficient validation of user-supplied input in REST API calls, enabling an authenticated, remote attacker to perform SQL injection against the underlying database. A successful exploit...

CVE-2026-20334

CVE-2026-20334 affects Cisco Secure Adaptive Security Appliance Software , Cisco Secure Firewall Threat Defense (FTD) Software , and Cisco Secure Firewall Management Center (FMC) Software . The vulnerabilities stem from improper adherence to coding standards grouped under CWE-710 , discovered dur...

CVE-2026-20284 Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability

A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks. This vulnerability is due to insufficient validation of user-supplied input in REST API calls. An attacker could exploit this vulnerability by sending crafted input to ...

CVE-2026-76424 Cisco ISE Arbitrary File Access Vulnerability

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

CVE-2026-76424

Cisco ISE REST API contains an arbitrary file access vulnerability caused by insufficient validation in file operations . An authenticated remote attacker holding valid administrative credentials can upload or copy files using a crafted path, allowing files to be placed at arbitrary locations on ...

EUVD-2026-81131

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

CVE-2026-76424 Cisco ISE Arbitrary File Access Vulnerability

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

CVE-2026-20332

CVE-2026-20332 covers improper access control vulnerabilities (CWE-284) identified during an internal security review of Cisco Secure Adaptive Security Appliance (ASA) Software , Secure Firewall Threat Defense (FTD) Software , and Secure Firewall Management Center (FMC) Software . Cisco addressed...

EUVD-2026-81130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20332 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20344

Cisco Secure Firewall Management Center (FMC) Software contains a SQL injection vulnerability in its web-based management interface, caused by insufficient validation of user-supplied input. An authenticated remote attacker holding the Security Approver , Access Admin , or Network Admin role can ...

EUVD-2026-81129

A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have a valid account on the device with the role of...