# Cisco Identity Services Engine Passive Identity Connector vulnerabilities Source: https://junglewise.ai/threats/technologies/identity-services-engine-passive-identity-connector Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/identity-services-engine-passive-identity-connector.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 12 vulnerabilities in Cisco Identity Services Engine Passive Identity Connector: 1 in the last 7 days and 8 in the last 90 days, 7 of them critical and 2 exploited in the wild. The most recent, CVE-2026-20183, was published on 10 November 2026. 1 vulnerability in the last four weeks, down 83% on the four before (6). 0 critical against 3. ## Counts - Last 7 days: 1 - Last 30 days: 2 - Last 90 days: 8 - All time: 12 (7 critical, 2 exploited in the wild) ## About Cisco Identity Services Engine Passive Identity Connector Passive connector component for Cisco Identity Services Engine that monitors network traffic. ## Latest Cisco Identity Services Engine Passive Identity Connector vulnerabilities - [CVE-2026-20183: Cisco Identity Services Engine authorization bypass in management interface](https://junglewise.ai/threats/cve-2026-20183-a-vulnerability-in-the-web-based-management-interface-of-cisco) (medium, CVSS 4.3, published 10 Nov 2026) - [CVE-2026-20241: Cisco Identity Services Engine authorization bypass in certificate enrollment](https://junglewise.ai/threats/cve-2026-20241-a-vulnerability-in-the-authorization-mechanism-of-cisco-identity) (medium, CVSS 5.3, published 4 Nov 2026) - [CVE-2026-76444: Cisco ISE information disclosure in Policy Runtime Repository Table service](https://junglewise.ai/threats/cve-2026-76444-cisco-ise-information-disclosure-in-policy-runtime-repository) (medium, CVSS 5.3, published 16 Sep 2026) - [CVE-2026-76433: Cisco ISE path traversal in client provisioning](https://junglewise.ai/threats/cve-2026-76433-cisco-ise-path-traversal-in-client-provisioning) (medium, CVSS 5.3, published 16 Sep 2026) - [CVE-2026-76432: Cisco ISE path traversal in file upload](https://junglewise.ai/threats/cve-2026-76432-cisco-ise-path-traversal-in-file-upload) (medium, CVSS 4.9, published 16 Sep 2026) - [CVE-2026-76423: Cisco ISE REST API authentication bypass](https://junglewise.ai/threats/cve-2026-76423-cisco-ise-rest-api-authentication-bypass) (critical, CVSS 10, published 16 Sep 2026) - [CVE-2026-20192: Cisco Identity Services Engine improper access control](https://junglewise.ai/threats/cve-2026-20192-cisco-identity-services-engine-improper-access-control) (critical, CVSS 10, published 16 Sep 2026) - [CVE-2026-20130: Cisco Identity Services Engine improper neutralization of special elements](https://junglewise.ai/threats/cve-2026-20130-cisco-identity-services-engine-improper-neutralization-of-special) (critical, CVSS 10, published 16 Sep 2026) - [CVE-2026-20181: Cisco ISE and ISE-PIC command injection in underlying OS](https://junglewise.ai/threats/cve-2026-20181-cisco-ise-and-ise-pic-command-injection-in-underlying-os) (critical, CVSS 9.1, published 17 Jun 2026) - [CVE-2026-20147: Cisco ISE command injection in underlying operating system](https://junglewise.ai/threats/cve-2026-20147-cisco-ise-command-injection-in-underlying-operating-system) (critical, CVSS 9.9, published 15 Apr 2026) - [CVE-2025-20337: Cisco Identity Services Engine injection vulnerability in API](https://junglewise.ai/threats/cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api) (critical, exploited in the wild, CVSS 10, published 28 Jul 2025) - [CVE-2025-20281: Cisco Identity Services Engine unauthenticated RCE in API](https://junglewise.ai/threats/cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api) (critical, exploited in the wild, CVSS 10, published 28 Jul 2025) ## Most severe Cisco Identity Services Engine Passive Identity Connector vulnerabilities - [CVE-2025-20281: Cisco Identity Services Engine unauthenticated RCE in API](https://junglewise.ai/threats/cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api) (critical, exploited in the wild, CVSS 10, published 28 Jul 2025) - [CVE-2025-20337: Cisco Identity Services Engine injection vulnerability in API](https://junglewise.ai/threats/cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api) (critical, exploited in the wild, CVSS 10, published 28 Jul 2025) - [CVE-2026-76423: Cisco ISE REST API authentication bypass](https://junglewise.ai/threats/cve-2026-76423-cisco-ise-rest-api-authentication-bypass) (critical, CVSS 10, published 16 Sep 2026) - [CVE-2026-20192: Cisco Identity Services Engine improper access control](https://junglewise.ai/threats/cve-2026-20192-cisco-identity-services-engine-improper-access-control) (critical, CVSS 10, published 16 Sep 2026) - [CVE-2026-20130: Cisco Identity Services Engine improper neutralization of special elements](https://junglewise.ai/threats/cve-2026-20130-cisco-identity-services-engine-improper-neutralization-of-special) (critical, CVSS 10, published 16 Sep 2026) - [CVE-2026-20147: Cisco ISE command injection in underlying operating system](https://junglewise.ai/threats/cve-2026-20147-cisco-ise-command-injection-in-underlying-operating-system) (critical, CVSS 9.9, published 15 Apr 2026) - [CVE-2026-20181: Cisco ISE and ISE-PIC command injection in underlying OS](https://junglewise.ai/threats/cve-2026-20181-cisco-ise-and-ise-pic-command-injection-in-underlying-os) (critical, CVSS 9.1, published 17 Jun 2026) - [CVE-2026-76433: Cisco ISE path traversal in client provisioning](https://junglewise.ai/threats/cve-2026-76433-cisco-ise-path-traversal-in-client-provisioning) (medium, CVSS 5.3, published 16 Sep 2026) - [CVE-2026-76444: Cisco ISE information disclosure in Policy Runtime Repository Table service](https://junglewise.ai/threats/cve-2026-76444-cisco-ise-information-disclosure-in-policy-runtime-repository) (medium, CVSS 5.3, published 16 Sep 2026) - [CVE-2026-20241: Cisco Identity Services Engine authorization bypass in certificate enrollment](https://junglewise.ai/threats/cve-2026-20241-a-vulnerability-in-the-authorization-mechanism-of-cisco-identity) (medium, CVSS 5.3, published 4 Nov 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 83% on the four before (6). 0 critical against 3. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 6 | 3 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Other Cisco technologies - [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 70 vulnerabilities - [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities - [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities - [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities - [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities - [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities - [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities - [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities - [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities - [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities - [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities - [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 16 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco Identity Services Engine Passive Identity Connector vulnerabilities", https://junglewise.ai/threats/technologies/identity-services-engine-passive-identity-connector, 12 November 2026.