What’s Vulnerable › Products

Cisco Identity Services Engine vulnerabilities

222 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 79 published in the last 12 months.

Check whether your Cisco Identity Services Engine version is affected

Exploited Cisco Identity Services Engine vulnerabilities

• CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
• CVE-2025-20337 — Cisco Identity Services Engine Injection Vulnerability
• CVE-2025-20281 — Cisco Identity Services Engine Injection Vulnerability
• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Identity Services Engine vulnerabilities

• CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVSS 10.0) — exploited
• CVE-2026-76451 — Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76450 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76449 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76448 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76447 — Cisco Identity Services Engine Certificate Reload Vulnerability (CVSS 5.3)
• CVE-2026-76446 — Cisco Identity Services Engine External Entity Injection Vulnerability (CVSS 4.9)
• CVE-2026-76444 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2026-76439 — Cisco Identity Services Engine Event Injection Vulnerability (CVSS 5.3)
• CVE-2026-76434 — Cisco Identity Services Engine Arbitrary File Read Vulnerability (CVSS 4.9)
• CVE-2026-76433 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2026-76432 — Cisco Identity Services Engine Arbitrary File Write Vulnerability (CVSS 4.9)
• CVE-2026-76431 — Cisco Identity Services Engine Arbitrary File Deletion Vulnerability (CVSS 4.9)
• CVE-2026-76428 — Cisco ISE Profiler SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76427 — Cisco ISE XML External Entity Injection Vulnerability (CVSS 4.9)
• CVE-2026-76426 — Cisco ISE REST API SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76425 — Cisco ISE SQL Injection Vulnerability (CVSS 7.6)
• CVE-2026-76424 — Cisco ISE Arbitrary File Access Vulnerability (CVSS 7.2)
• CVE-2026-20352 — Cisco Identity Services Engine RADIUS Denial of Service Vulnerability (CVSS 8.6)
• CVE-2026-20309 — Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2026-20300 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 7.1)
• CVE-2026-20287 — Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities (CVSS 6.5)
• CVE-2026-20286 — Cisco Identity Services Engine Authorization Bypass Vulnerability (CVSS 4.3)
• CVE-2026-20285 — Cisco Identity Services Engine Authorization Bypass Vulnerability (CVSS 4.3)
• CVE-2026-20284 — Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability (CVSS 9.1)