Product by Cisco
Cisco Identity Services Engine Passive Identity Connector (ISE-PIC)
31 known vulnerabilities in Cisco Identity Services Engine Passive Identity Connector (ISE-PIC) (Cisco), 3 of them actively exploited (CISA KEV).
Key figures
31
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-76460 | Cisco Identity Services Engine Authentication Bypass Vulnerability In CISA KEValso in 4 other products | 10.0 | |
| Critical | CVE-2025-20281 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability In CISA KEValso in 2 other products | 10.0 | |
| Critical | CVE-2025-20337 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability In CISA KEValso in 3 other products | 10.0 | |
| Critical | CVE-2026-20147 | Cisco Identity Services Engine Remote Code Execution Vulnerability | 9.9 | |
| Critical | CVE-2025-20282 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability | 10.0 | |
| Critical | CVE-2026-20181 | Cisco Identity Services Engine Remote Code Execution Vulnerability | 9.1 | |
| High | CVE-2025-20284 | Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability | 6.5 | |
| High | CVE-2025-20283 | Cisco Identity Services Engine Authenticated Remote Code Execution Vulnerability | 6.5 | |
| Medium | CVE-2026-20148 | Cisco Identity Services Engine Path Traversal Vulnerability | 4.9 | |
| Critical | CVE-2026-20130 | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities | 10.0 | |
| Medium | CVE-2026-76433 | Cisco Identity Services Engine Information Disclosure Vulnerability | 5.3 | |
| Critical | CVE-2026-20192 | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities | 10.0 | |
| Medium | CVE-2026-76431 | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability | 4.9 | |
| Medium | CVE-2026-76432 | Cisco Identity Services Engine Arbitrary File Write Vulnerability | 4.9 | |
| Critical | CVE-2026-20234 | Cisco ISE Passive Identity Connector: Insufficiently Protected Credentials | 9.9 | |
| High | CVE-2026-20190 | Cisco Identity Services Engine Information Disclosure Vulnerability | 7.5 | |
| Medium | CVE-2026-76426 | Cisco ISE REST API SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76428 | Cisco ISE Profiler SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76451 | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76449 | Cisco Identity Services Engine SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76448 | Cisco Identity Services Engine SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-76450 | Cisco Identity Services Engine SQL Injection Vulnerability | 4.9 | |
| Medium | CVE-2026-20146 | Cisco Identity Services Engine Path Traversal Vulnerability | 5.5 | |
| Medium | CVE-2026-76439 | Cisco Identity Services Engine Event Injection Vulnerability | 5.3 | |
| Medium | CVE-2026-76447 | Cisco Identity Services Engine Certificate Reload Vulnerability | 5.3 |
News
- Cisco Zero-Day Highlights API Endpoint Authentication Issuesdarkreading,
- Cisco patches max-severity ISE flaw, the second critical zero-day this weekcsoonline,
- NCSC-2026-0382 [1.00] [H/H] Kwetsbaarheden verholpen in Cisco Identity Services Engine (ISE)ncsc-nl,
- Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacksthehackernews,
- Multiples vulnérabilités dans les produits Cisco (17 septembre 2026)cert-fr,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,