Skip to content

CVE-2026-76423

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 16, 2026
Last Seen
September 16, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cisco Identity Services Engine Vulnerabilities Lead to Remote Code Execution Risks72.5

Multiple vulnerabilities have been identified in Cisco Identity Services Engine (ISE) and its Passive Identity Connector (ISE-PIC), allowing authenticated remote attackers to execute arbitrary commands, perform SQL injections, and bypass authentication. Key CVEs include CVE-2026-20282, CVE-2026-2028...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionCWE-287 - Improper AuthenticationCwe-611 - Improper Restriction Of XML External Entity Reference (xxe)Cwe-89 - SQL InjectionT1190 - Exploit Public-Facing ApplicationCisco ISE Arbitrary File Access VulnerabilityCisco ISE Profiler SQL Injection VulnerabilityCisco ISE REST API Authentication Bypass VulnerabilityCisco ISE REST API SQL Injection VulnerabilityCisco ISE SQL Injection VulnerabilityCisco ISE XML External Entity Injection VulnerabilityXML External Entity Injection