What’s Vulnerable › Products

Cisco Identity Services Engine Passive Identity Connector vulnerabilities

31 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 31 published in the last 12 months.

Check whether your Cisco Identity Services Engine Passive Identity Connector version is affected

Exploited Cisco Identity Services Engine Passive Identity Connector vulnerabilities

• CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
• CVE-2025-20337 — Cisco Identity Services Engine Injection Vulnerability
• CVE-2025-20281 — Cisco Identity Services Engine Injection Vulnerability

Latest Cisco Identity Services Engine Passive Identity Connector vulnerabilities

• CVE-2026-76460 — Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability (CVSS 10.0) — exploited
• CVE-2026-76451 — Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76450 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76449 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76448 — Cisco Identity Services Engine SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76447 — Cisco Identity Services Engine Certificate Reload Vulnerability (CVSS 5.3)
• CVE-2026-76446 — Cisco Identity Services Engine External Entity Injection Vulnerability (CVSS 4.9)
• CVE-2026-76444 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2026-76439 — Cisco Identity Services Engine Event Injection Vulnerability (CVSS 5.3)
• CVE-2026-76434 — Cisco Identity Services Engine Arbitrary File Read Vulnerability (CVSS 4.9)
• CVE-2026-76433 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 5.3)
• CVE-2026-76432 — Cisco Identity Services Engine Arbitrary File Write Vulnerability (CVSS 4.9)
• CVE-2026-76431 — Cisco Identity Services Engine Arbitrary File Deletion Vulnerability (CVSS 4.9)
• CVE-2026-76428 — Cisco ISE Profiler SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-76426 — Cisco ISE REST API SQL Injection Vulnerability (CVSS 4.9)
• CVE-2026-20192 — Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities (CVSS 10.0)
• CVE-2026-20130 — Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities (CVSS 10.0)
• CVE-2026-20234 — Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities (CVSS 9.9)
• CVE-2026-20146 — Cisco Identity Services Engine Path Traversal Vulnerability (CVSS 5.5)
• CVE-2026-20190 — Cisco Identity Services Engine Information Disclosure Vulnerability (CVSS 7.5)
• CVE-2026-20181 — Cisco Identity Services Engine Remote Code Execution Vulnerability (CVSS 9.1)
• CVE-2026-20148 — Cisco Identity Services Engine Path Traversal Vulnerability (CVSS 4.9)
• CVE-2026-20147 — Cisco Identity Services Engine Remote Code Execution Vulnerability (CVSS 9.9)
• CVE-2026-20136 — Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability (CVSS 6.0)
• CVE-2025-20337 — Cisco Identity Services Engine Injection Vulnerability (CVSS 10.0) — exploited