Cisco Ise Passive Identity Connector vulnerabilities

CVE-2026-76439 [MEDIUM] CWE-306 CVE-2026-76439: A vulnerability in the endpoint posture status reporting functionality of the guest portal web appli A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authentication on an internal interface that is exposed through t

CVE-2026-76431 [MEDIUM] CWE-22 CVE-2026-76431: A vulnerability in the file management function of the web-based management interface of Cisco ISE a A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improp

CVE-2026-76451 [MEDIUM] CWE-564 CVE-2026-76451: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (IS A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database

CVE-2026-76448 [MEDIUM] CWE-89 CVE-2026-76448: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (IS A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database

CVE-2026-76449 [MEDIUM] CWE-89 CVE-2026-76449: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (IS A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database

CVE-2026-76450 [MEDIUM] CWE-564 CVE-2026-76450: A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (IS A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on an affected device. This vulnerability is due to insufficient validation of user-supplied input to the affected APIs before it is used to build database

CVE-2026-76427 [MEDIUM] CWE-611 CVE-2026-76427: A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remo A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable external entity resolution. An attacker could exploit th

CVE-2026-76447 [MEDIUM] CWE-306 CVE-2026-76447: A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco IS A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP responder certificate and key material. This vulnerability is due to missing authentication on a function of the OCSP responder. An attacker could exp

CVE-2026-76426 [MEDIUM] CWE-89 CVE-2026-76426: A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring database. This vulnerability is due to insufficient validation of specific parameters that are then concatenated into an SQL statement. An attacker could exploit this vulnerability by sen

CVE-2026-76446 [MEDIUM] CWE-611 CVE-2026-76446: A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attack A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This vulnerability is due to improper restriction of XML external entity references. An attacker could exploit this vulnerability by sending a crafted request to an a

CVE-2026-76444 [MEDIUM] CWE-306 CVE-2026-76444: A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. This vulnerability is due to missing authentication on the Policy Runtime Repository Table (PRRT) service. An attacker could exploit this vulnerability by send

CVE-2026-76428 [MEDIUM] CWE-89 CVE-2026-76428: A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session database. This vulnerability is due to certain parameters being concatenated directly into SQL clauses without parameterization. An attacker could exploit this vulnerability by sending a c

CVE-2026-76434 [MEDIUM] CWE-22 CVE-2026-76434: A vulnerability in the certificate import functionality of the web-based management interface of Cis A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read arbitrary files from the affected system. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient

CVE-2025-20331 [MEDIUM] CWE-80 CVE-2025-20331: A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could ex

CVE-2026-20285 [MEDIUM] CWE-285 CVE-2026-20285: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Ci A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An at