CVE-2025-20337

CVE-2025-20337 affects Cisco Identity Services Engine (ISE) and ISE-PIC via an API injection vulnerability. An unauthenticated, remote attacker can submit a crafted API request to exploit insufficient input validation and achieve arbitrary code execution as root on the underlying OS. Reported imp...

CVE-2025-20281

CVE-2025-20281 affects Cisco Identity Services Engine (ISE) and ISE-PIC via an exposed API where insufficient input validation enables unauthenticated remote code execution as root. The flaw is described as an input-validation vulnerability in a specific API endpoint, allowing an attacker to craf...

CVE-2026-20147

Cisco CVE-2026-20147 affects Cisco Identity Services Engine (ISE) and ISE-PIC. An authenticated, remote attacker with valid administrative credentials can exploit insufficient input validation via a crafted HTTP request to execute arbitrary commands on the device’s underlying OS, potentially gain...

CVE-2026-20181

Cisco ISE/ISE-PIC in Cisco IOS XE is affected by CVE-2026-20181. The CVE entry describes authenticated remote command execution via crafted HTTP input with privilege escalation to root and potential DoS in single-node deployments. Connected PT-security material (PT-2026-34270) references a separa...

CVE-2025-20282

CVE-2025-20282 affects Cisco ISE and ISE-PIC. An unauthenticated attacker can exploit an internal API to upload arbitrary files via the vulnerable endpoint /api/v1/config/upload , bypassing validation and enabling the execution of those files on the host with root privileges. The issue arises fro...

CVE-2026-20146

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by CVE-2026-20146. The issue stems from improper validation of user-supplied input, enabling a remote, authenticated attacker (with valid administrative credentials) to perform path traversal via a crafted HTTP request and read or dele...

CVE-2026-76460

A critical authentication bypass (CVSS 10.0) in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) stems from insufficient authentication control on an API endpoint—described as incorrect use of privileged APIs. An unauthenticated, remote attacker can exploit ...

CVE-2026-20190

Cisco ISE and ISE-PIC are affected by CVE-2026-20190. The issue arises from improper authorization checks when accessing a resource, allowing an unauthenticated, remote attacker to view sensitive information on an affected device. Reported impact includes access to hashed credentials that could b...

CVE-2026-20136

CVE-2026-20136 affects Cisco Identity Services Engine (ISE) and ISE-PIC CLI. Root cause: insufficient input validation enabling crafted CLI input to trigger command injection and elevate privileges to root on the underlying OS. Impact: authenticated, local admin can gain root privileges. Exploita...

CVE-2026-20192

CVE-2026-20192 affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) , stemming from improper access control issues (CWE-284) identified during an internal security review. The CVSS 3.1 base score is 10.0 (Critical) , with a network attack vector, low com...

CVE-2025-20130

Cisco ISE/ISE-PIC expose an authenticated admin-facing Arbitrary File Upload vulnerability via the API due to improper validation of the file copy function. An admin with network access can send crafted file upload requests to a specific endpoint to upload arbitrary files. Cisco has released upda...

CVE-2026-20234

CVE-2026-20234 affects Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) . The vulnerability is an insufficiently protected credentials issue (CWE-522), discovered through Cisco's internal security review and addressed in a software hardening release . The CV...

CVE-2026-20130

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by multiple internally discovered vulnerabilities grouped under CWE-74 (Improper Neutralization of Special Elements), addressed as part of a software hardening release following an internal securi...

CVE-2025-20285

CVE-2025-20285 describes a vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC that could allow an authenticated, remote attacker to bypass IP-based access controls and log into the device from an IP address that should have been restricted. The root cause is imprope...

CVE-2025-20284

Cisco ISE and Cisco ISE-PIC have a CVE-2025-20284 vulnerability in a specific API that could allow an authenticated, remote attacker with high privileges to execute arbitrary code as root on the underlying OS. Root cause is insufficient validation of user-supplied input, exploitable by submitting...

CVE-2026-76439

Cisco Identity Services Engine (ISE) has an event injection vulnerability in the endpoint posture status reporting functionality of its guest portal web application. The root cause is insufficient authentication on an internal interface that is exposed through the guest portal. An unauthenticated...

CVE-2025-20283

The vulnerability (CVE-2025-20283) affects Cisco Identity Services Engine (ISE) and ISE-PIC via a specific API, caused by insufficient validation of user-supplied input. An attacker with valid high-priv credentials could submit crafted API requests to execute commands as root on the underlying OS...

CVE-2026-20148

Cisco Identity Services Engine (ISE) and ISE-PIC are affected by a path traversal vulnerability due to improper input validation. An authenticated attacker with administrative credentials can issue a crafted HTTP request to read arbitrary files on the underlying OS. Exploitation details indicate ...

CVE-2026-76426

Cisco ISE and Cisco ISE-PIC contain an SQL injection vulnerability in their REST API , caused by insufficient validation of specific parameters that are concatenated directly into an SQL statement. An authenticated, remote attacker with valid administrative credentials can send a crafted request ...

CVE-2026-76431

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker with administrative credentials to delete arbitrary files and directories on the underlying operating system. The root cause is improper va...

CVE-2026-76444

CVE-2026-76444 affects an internal service in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC . The root cause is missing authentication on the Policy Runtime Repository Table (PRRT) service , allowing an unauthenticated, remote attacker to send a crafted request and retrieve sensitive con...

CVE-2026-76447

Cisco ISE and Cisco ISE-PIC contain a vulnerability in the OCSP responder caused by missing authentication on a specific function. An unauthenticated, remote attacker can send a crafted request to trigger an administrative reload of the OCSP responder certificate and key material on demand. The i...

CVE-2026-76434

Cisco ISE and Cisco ISE-PIC contain an arbitrary file read vulnerability in the certificate import functionality of their web-based management interface. The root cause is insufficient validation of user-supplied input , allowing an authenticated, remote attacker with administrative credentials t...

CVE-2026-76449

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by an SQL or HQL injection vulnerability caused by insufficient validation of user-supplied input to affected APIs before it is used to build database queries. An authenticated remote attacker wit...

CVE-2026-76433

This is a directory traversal vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC . Due to insufficient validation of directory traversal character sequences in a user-supplied path during provisioning resource requests, an unauthenticated, remote attacker can...

CVE-2026-76448

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by an SQL/HQL injection vulnerability caused by insufficient validation of user-supplied input to affected APIs before it is used to build database queries. An authenticated remote attacker with v...

CVE-2026-76428

A SQL injection vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC stems from certain parameters being concatenated directly into SQL clauses without parameterization. An authenticated remote attacker with valid administrative credentials can send a crafted request to read information ...

CVE-2026-76432

A directory traversal vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker with administrative-level privileges to write arbitrary files to any location on the affected system. The root cause is insufficient validation of dire...

CVE-2026-76446

CVE-2026-76446 affects an API in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC , caused by improper restriction of XML external entity (XXE) references . An authenticated, remote attacker can send a crafted request to read specific files on the underlying operating system that the affect...

CVE-2026-76450

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) contain an SQL/HQL injection vulnerability caused by insufficient validation of user-supplied input to affected APIs before it is used to build database queries. An authenticated, remote attacker with valid ad...

CVE-2026-76451

Cisco Identity Services Engine (ISE) and Cisco ISE-PIC contain a SQL/HQL injection vulnerability in the Certificate Management APIs, caused by insufficient validation of user-supplied input before it is used to build database queries. An authenticated, remote attacker with valid administrative cr...