Product by Cisco
Cisco Ise Passive Identity Connector
35 known vulnerabilities in Cisco Ise Passive Identity Connector (Cisco), 2 of them actively exploited (CISA KEV).
Key figures
35
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
14
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-76460 | Cisco Identity Services Engine Authentication Bypass Vulnerability In CISA KEValso in 4 other products | 10.0 | |
| Critical | CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability In CISA KEValso in 3 other products | 10.0 | |
| Critical | CVE-2026-20147 | Cisco Identity Services Engine Remote Code Execution Vulnerability | 9.9 | |
| Critical | CVE-2026-20181 | Cisco Identity Services Engine Remote Code Execution Vulnerability | 9.1 | |
| Critical | CVE-2025-20124 | Cisco Identity Services Engine Java Deserialization Vulnerability | 9.9 | |
| Critical | CVE-2025-20125 | Cisco Identity Services Engine Insufficient Authorization Bypass Vulnerability | 9.1 | |
| Critical | CVE-2026-20305 | Cisco Identity Services Engine Command Injection Vulnerability | 9.1 | |
| Critical | CVE-2026-20306 | Cisco Identity Services Engine Command Injection Vulnerability | 9.1 | |
| Medium | CVE-2026-20148 | Cisco Identity Services Engine Path Traversal Vulnerability | 4.9 | |
| Critical | CVE-2026-76423 | Cisco ISE API Authentication Bypass Vulnerability | 10.0 | |
| Critical | CVE-2026-20130 | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities | 10.0 | |
| Medium | CVE-2026-76433 | Cisco Identity Services Engine Information Disclosure Vulnerability | 5.3 | |
| Critical | CVE-2026-20192 | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities | 10.0 | |
| Medium | CVE-2026-76432 | Cisco Identity Services Engine Arbitrary File Write Vulnerability | 4.9 | |
| Medium | CVE-2026-76431 | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability | 4.9 | |
| Critical | CVE-2026-20194 | Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities | 9.1 | |
| Critical | CVE-2026-20237 | Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities | 9.1 | |
| Critical | CVE-2026-20234 | Cisco ISE Passive Identity Connector: Insufficiently Protected Credentials | 9.9 | |
| High | CVE-2026-20190 | Cisco Identity Services Engine Information Disclosure Vulnerability | 7.5 | |
| Medium | CVE-2026-20287 | Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities | 6.5 | |
| Medium | CVE-2026-76428 | Cisco ISE Profiler SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76426 | Cisco ISE REST API SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76427 | Cisco ISE XML External Entity Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-20146 | Cisco Identity Services Engine Path Traversal Vulnerability | 5.5 | |
| Medium | CVE-2026-76448 | Cisco Identity Services Engine SQL Injection Vulnerability | 4.9 |
News
- Cisco Identity Services Engine Authentication Bypass Vulnerabilitiescisco-psirt,
- Cisco Zero-Day Highlights API Endpoint Authentication Issuesdarkreading,
- Cisco patches max-severity ISE flaw, the second critical zero-day this weekcsoonline,
- NCSC-2026-0382 [1.00] [H/H] Kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE)ncsc-nl,
- Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacksthehackernews,
- Multiples vulnérabilités dans les produits Cisco (17 septembre 2026)cert-fr,