What’s Vulnerable › Vulnerabilities

CVE-2026-76423: Cisco ISE API Authentication Bypass Vulnerability

• Severity: critical (CVSS 10.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-09-17
• Weakness: CWE-290

Description

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request to the exposed REST API port. A successful exploit could allow the attacker to read and modify ISE configuration and identity data with administrative privileges.

Affected products

• Cisco ISE Passive Identity Connector: 3.2.0, 3.1.0, 3.3.0, 3.4.0, 3.5.0
• Cisco Identity Services Engine: 3.1.0, 3.1.0 p1, 3.1.0 p3, 3.1.0 p2, 3.2.0, 3.1.0 p4 (+42)

In the news

• Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-hrP9jQSQ

Get alerted when CVE-2026-76423 or the next vulnerability affects your stack