PT-2026-94028

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description An issue in the offline profiler feed service allows an authenticated remote attacker to read arbitrary files from the file system and send requests to internal systems. This occurs because...

CVE-2026-76427: Improper Restriction of XML External Entity Reference

A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable...