CVE-2026-76423

CRITICAL10.0Auth bypass

Description

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request to the exposed REST API port. A successful exploit could allow the attacker to read and modify ISE configuration and identity data with administrative privileges.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

Low

Affected products

Cisco / Cisco Identity Services Engine Software3.1.0 – 3.1.0
Cisco / Cisco Identity Services Engine Software3.1.0 p1 – 3.1.0 p1
Cisco / Cisco Identity Services Engine Software3.1.0 p3 – 3.1.0 p3
Cisco / Cisco Identity Services Engine Software3.1.0 p2 – 3.1.0 p2
Cisco / Cisco Identity Services Engine Software3.2.0 – 3.2.0
Cisco / Cisco Identity Services Engine Software3.1.0 p4 – 3.1.0 p4
Cisco / Cisco Identity Services Engine Software3.1.0 p5 – 3.1.0 p5
Cisco / Cisco Identity Services Engine Software3.2.0 p1 – 3.2.0 p1
Cisco / Cisco Identity Services Engine Software3.1.0 p6 – 3.1.0 p6
Cisco / Cisco Identity Services Engine Software3.2.0 p2 – 3.2.0 p2
Cisco / Cisco Identity Services Engine Software3.1.0 p7 – 3.1.0 p7
Cisco / Cisco Identity Services Engine Software3.3.0 – 3.3.0
Cisco / Cisco Identity Services Engine Software3.2.0 p3 – 3.2.0 p3
Cisco / Cisco Identity Services Engine Software3.2.0 p4 – 3.2.0 p4
Cisco / Cisco Identity Services Engine Software3.1.0 p8 – 3.1.0 p8
Cisco / Cisco Identity Services Engine Software3.2.0 p5 – 3.2.0 p5
Cisco / Cisco Identity Services Engine Software3.2.0 p6 – 3.2.0 p6
Cisco / Cisco Identity Services Engine Software3.1.0 p9 – 3.1.0 p9
Cisco / Cisco Identity Services Engine Software3.3 Patch 2 – 3.3 Patch 2
Cisco / Cisco Identity Services Engine Software3.3 Patch 1 – 3.3 Patch 1
Cisco / Cisco Identity Services Engine Software3.3 Patch 3 – 3.3 Patch 3
Cisco / Cisco Identity Services Engine Software3.4.0 – 3.4.0
Cisco / Cisco Identity Services Engine Software3.2.0 p7 – 3.2.0 p7
Cisco / Cisco Identity Services Engine Software3.3 Patch 4 – 3.3 Patch 4
Cisco / Cisco Identity Services Engine Software3.4 Patch 1 – 3.4 Patch 1
Cisco / Cisco Identity Services Engine Software3.1.0 p10 – 3.1.0 p10
Cisco / Cisco Identity Services Engine Software3.3 Patch 5 – 3.3 Patch 5
Cisco / Cisco Identity Services Engine Software3.3 Patch 6 – 3.3 Patch 6
Cisco / Cisco Identity Services Engine Software3.4 Patch 2 – 3.4 Patch 2
Cisco / Cisco Identity Services Engine Software3.3 Patch 7 – 3.3 Patch 7
Cisco / Cisco Identity Services Engine Software3.4 Patch 3 – 3.4 Patch 3
Cisco / Cisco Identity Services Engine Software3.5.0 – 3.5.0
Cisco / Cisco Identity Services Engine Software3.4 Patch 4 – 3.4 Patch 4
Cisco / Cisco Identity Services Engine Software3.3 Patch 8 – 3.3 Patch 8
Cisco / Cisco Identity Services Engine Software3.2 Patch 8 – 3.2 Patch 8
Cisco / Cisco Identity Services Engine Software3.5 Patch 1 – 3.5 Patch 1
Cisco / Cisco Identity Services Engine Software3.3 Patch 9 – 3.3 Patch 9
Cisco / Cisco Identity Services Engine Software3.2 Patch 9 – 3.2 Patch 9
Cisco / Cisco Identity Services Engine Software3.4 Patch 5 – 3.4 Patch 5
Cisco / Cisco Identity Services Engine Software3.5 Patch 3 – 3.5 Patch 3
Cisco / Cisco Identity Services Engine Software3.5 Patch 2 – 3.5 Patch 2
Cisco / Cisco Identity Services Engine Software3.3 Patch 10 – 3.3 Patch 10
Cisco / Cisco Identity Services Engine Software3.3 Patch 11 – 3.3 Patch 11
Cisco / Cisco Identity Services Engine Software3.4 Patch 6 – 3.4 Patch 6
Cisco / Cisco Identity Services Engine Software3.2 Patch 10 – 3.2 Patch 10
Cisco / Cisco Identity Services Engine Software3.1.0 p72 – 3.1.0 p72
Cisco / Cisco Identity Services Engine Software3.1.0 p11 – 3.1.0 p11
Cisco / Cisco Identity Services Engine Software3.3 Patch 12 – 3.3 Patch 12
Cisco / Cisco ISE Passive Identity Connector3.2.0 – 3.2.0
Cisco / Cisco ISE Passive Identity Connector3.1.0 – 3.1.0
Cisco / Cisco ISE Passive Identity Connector3.3.0 – 3.3.0
Cisco / Cisco ISE Passive Identity Connector3.4.0 – 3.4.0
Cisco / Cisco ISE Passive Identity Connector3.5.0 – 3.5.0

References

VENDOR_ADVISORYhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-hrP9jQSQ

Updated 5m ago · 8 sources