{"schema_version":1,"title":"Cisco Identity Services Engine vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 51 vulnerabilities in Cisco Identity Services Engine: 0 in the last 7 days and 39 in the last 90 days, 18 of them critical and 3 exploited in the wild. The most recent, CVE-2026-76460, was published on 16 September 2026.","url":"https://junglewise.ai/threats/technologies/identity-services-engine","json_url":"https://junglewise.ai/threats/technologies/identity-services-engine.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/identity-services-engine","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":6,"all_time":51,"critical":18,"exploited":3,"last_7_days":0,"last_30_days":38,"last_90_days":39,"last_365_days":49},"latest":[{"cve":"CVE-2026-76460","cvss":10,"epss":0.1403,"slug":"cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use","title":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.","severity":"critical","exploited":true,"published_at":"2026-09-16T21:17:21.43+00:00","url":"https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use"},{"cve":"CVE-2026-76451","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76451-cisco-ise-sql-and-hql-injection-in-apis","title":"Cisco ISE SQL and HQL injection in APIs","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:21.3+00:00","url":"https://junglewise.ai/threats/cve-2026-76451-cisco-ise-sql-and-hql-injection-in-apis"},{"cve":"CVE-2026-76450","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76450-cisco-identity-services-engine-sql-and-hql-injection","title":"Cisco Identity Services Engine SQL and HQL injection","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:21.163+00:00","url":"https://junglewise.ai/threats/cve-2026-76450-cisco-identity-services-engine-sql-and-hql-injection"},{"cve":"CVE-2026-76449","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76449-cisco-ise-sql-hql-injection-in-apis","title":"Cisco ISE SQL/HQL injection in APIs","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:21.017+00:00","url":"https://junglewise.ai/threats/cve-2026-76449-cisco-ise-sql-hql-injection-in-apis"},{"cve":"CVE-2026-76448","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76448-cisco-identity-services-engine-sql-and-hql-injection","title":"Cisco Identity Services Engine SQL and HQL injection","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.867+00:00","url":"https://junglewise.ai/threats/cve-2026-76448-cisco-identity-services-engine-sql-and-hql-injection"},{"cve":"CVE-2026-76447","cvss":5.3,"epss":0.0038,"slug":"cve-2026-76447-cisco-ise-ocsp-responder-authentication-bypass","title":"Cisco ISE OCSP responder authentication bypass","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.73+00:00","url":"https://junglewise.ai/threats/cve-2026-76447-cisco-ise-ocsp-responder-authentication-bypass"},{"cve":"CVE-2026-76446","cvss":4.9,"epss":0.003,"slug":"cve-2026-76446-cisco-ise-external-entity-injection-in-api","title":"Cisco ISE external entity injection in API","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.597+00:00","url":"https://junglewise.ai/threats/cve-2026-76446-cisco-ise-external-entity-injection-in-api"},{"cve":"CVE-2026-76444","cvss":5.3,"epss":0.0029,"slug":"cve-2026-76444-cisco-ise-information-disclosure-in-policy-runtime-repository","title":"Cisco ISE information disclosure in Policy Runtime Repository Table service","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:19.463+00:00","url":"https://junglewise.ai/threats/cve-2026-76444-cisco-ise-information-disclosure-in-policy-runtime-repository"},{"cve":"CVE-2026-76439","cvss":5.3,"epss":0.0032,"slug":"cve-2026-76439-cisco-ise-authentication-bypass-in-guest-portal-endpoint-posture","title":"Cisco ISE authentication bypass in guest portal endpoint posture","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:19.303+00:00","url":"https://junglewise.ai/threats/cve-2026-76439-cisco-ise-authentication-bypass-in-guest-portal-endpoint-posture"},{"cve":"CVE-2026-76434","cvss":4.9,"epss":0.0038,"slug":"cve-2026-76434-cisco-ise-path-traversal-in-certificate-import","title":"Cisco ISE path traversal in certificate import","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:15.177+00:00","url":"https://junglewise.ai/threats/cve-2026-76434-cisco-ise-path-traversal-in-certificate-import"},{"cve":"CVE-2026-76433","cvss":5.3,"epss":0.0127,"slug":"cve-2026-76433-cisco-ise-path-traversal-in-client-provisioning","title":"Cisco ISE path traversal in client provisioning","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:15.017+00:00","url":"https://junglewise.ai/threats/cve-2026-76433-cisco-ise-path-traversal-in-client-provisioning"},{"cve":"CVE-2026-76432","cvss":4.9,"epss":0.0122,"slug":"cve-2026-76432-cisco-ise-path-traversal-in-file-upload","title":"Cisco ISE path traversal in file upload","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:14.867+00:00","url":"https://junglewise.ai/threats/cve-2026-76432-cisco-ise-path-traversal-in-file-upload"},{"cve":"CVE-2026-76428","cvss":4.9,"epss":0.0048,"slug":"cve-2026-76428-cisco-ise-rest-api-sql-injection-in-session-database","title":"Cisco ISE REST API SQL injection in session database","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:14.553+00:00","url":"https://junglewise.ai/threats/cve-2026-76428-cisco-ise-rest-api-sql-injection-in-session-database"},{"cve":"CVE-2026-76427","cvss":4.9,"epss":0.0046,"slug":"cve-2026-76427-cisco-ise-xml-external-entity-injection-in-offline-profiler-feed","title":"Cisco ISE XML external entity injection in offline profiler feed service","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:14.393+00:00","url":"https://junglewise.ai/threats/cve-2026-76427-cisco-ise-xml-external-entity-injection-in-offline-profiler-feed"},{"cve":"CVE-2026-76425","cvss":7.6,"epss":0.0041,"slug":"cve-2026-76425-cisco-identity-services-engine-sql-injection-in-apis","title":"Cisco Identity Services Engine SQL injection in APIs","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:14.107+00:00","url":"https://junglewise.ai/threats/cve-2026-76425-cisco-identity-services-engine-sql-injection-in-apis"},{"cve":"CVE-2026-76424","cvss":7.2,"epss":0.0092,"slug":"cve-2026-76424-cisco-ise-arbitrary-file-upload-and-execution","title":"Cisco ISE arbitrary file upload and execution","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:13.983+00:00","url":"https://junglewise.ai/threats/cve-2026-76424-cisco-ise-arbitrary-file-upload-and-execution"},{"cve":"CVE-2026-20352","cvss":8.6,"epss":0.004,"slug":"cve-2026-20352-cisco-identity-services-engine-radius-denial-of-service","title":"Cisco Identity Services Engine RADIUS denial of service","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:12.517+00:00","url":"https://junglewise.ai/threats/cve-2026-20352-cisco-identity-services-engine-radius-denial-of-service"},{"cve":"CVE-2026-20309","cvss":6.1,"epss":0.0019,"slug":"cve-2026-20309-cisco-identity-services-engine-reflected-xss-in-web-interface","title":"Cisco Identity Services Engine reflected XSS in web interface","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:10.02+00:00","url":"https://junglewise.ai/threats/cve-2026-20309-cisco-identity-services-engine-reflected-xss-in-web-interface"},{"cve":"CVE-2026-20300","cvss":7.1,"epss":0.0029,"slug":"cve-2026-20300-cisco-identity-services-engine-sql-injection-vulnerability","title":"Cisco Identity Services Engine SQL injection vulnerability","severity":"high","exploited":false,"published_at":"2026-09-16T21:17:09.897+00:00","url":"https://junglewise.ai/threats/cve-2026-20300-cisco-identity-services-engine-sql-injection-vulnerability"},{"cve":"CVE-2026-20287","cvss":6.5,"epss":0.0021,"slug":"cve-2026-20287-cisco-identity-services-engine-improper-privilege-management","title":"Cisco Identity Services Engine improper privilege management","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.48+00:00","url":"https://junglewise.ai/threats/cve-2026-20287-cisco-identity-services-engine-improper-privilege-management"},{"cve":"CVE-2026-20286","cvss":4.3,"epss":0.0036,"slug":"cve-2026-20286-cisco-identity-services-engine-authorization-bypass-in-web","title":"Cisco Identity Services Engine authorization bypass in web management interface","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.353+00:00","url":"https://junglewise.ai/threats/cve-2026-20286-cisco-identity-services-engine-authorization-bypass-in-web"},{"cve":"CVE-2026-20285","cvss":4.3,"epss":0.0036,"slug":"cve-2026-20285-cisco-identity-services-engine-authorization-bypass-in-web","title":"Cisco Identity Services Engine authorization bypass in web management interface","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.217+00:00","url":"https://junglewise.ai/threats/cve-2026-20285-cisco-identity-services-engine-authorization-bypass-in-web"},{"cve":"CVE-2026-20284","cvss":9.1,"epss":0.0039,"slug":"cve-2026-20284-cisco-identity-services-engine-sql-injection-in-sxp-rest-api","title":"Cisco Identity Services Engine SQL injection in SXP REST API","severity":"critical","exploited":false,"published_at":"2026-09-16T21:17:09.09+00:00","url":"https://junglewise.ai/threats/cve-2026-20284-cisco-identity-services-engine-sql-injection-in-sxp-rest-api"},{"cve":"CVE-2026-20283","cvss":6.5,"epss":0.0044,"slug":"cve-2026-20283-cisco-ise-ipsec-api-command-injection","title":"Cisco ISE IPsec API command injection","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:08.97+00:00","url":"https://junglewise.ai/threats/cve-2026-20283-cisco-ise-ipsec-api-command-injection"},{"cve":"CVE-2026-20282","cvss":4.9,"epss":0.0056,"slug":"cve-2026-20282-cisco-ise-input-validation-flaw-in-http-request-handling","title":"Cisco ISE input validation flaw in HTTP request handling","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:08.837+00:00","url":"https://junglewise.ai/threats/cve-2026-20282-cisco-ise-input-validation-flaw-in-http-request-handling"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":12,"exploited":1,"vulnerabilities":38},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Cisco IOS","slug":"ios","vulnerabilities":69,"url":"https://junglewise.ai/threats/technologies/ios"},{"name":"Cisco IOS XE","slug":"ios-xe","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/ios-xe"},{"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software"},{"name":"Cisco IOS XR","slug":"ios-xr","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/ios-xr"},{"name":"Cisco IOS XE Software","slug":"ios-xe-software","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/ios-xe-software"},{"name":"Cisco Firepower Threat Defense","slug":"firepower-threat-defense","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense"},{"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"name":"Cisco Ios Software","slug":"ios-software","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ios-software"},{"name":"Cisco ISE Passive Identity Connector","slug":"ise-passive-identity-connector","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector"},{"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"},{"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"name":"Cisco Adaptive Security Appliance (ASA)","slug":"adaptive-security-appliance-asa","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/adaptive-security-appliance-asa"}],"technology":{"hub":true,"name":"Cisco Identity Services Engine","slug":"identity-services-engine","vendor":{"name":"Cisco","slug":"cisco","url":"https://junglewise.ai/threats/vendors/cisco"},"aliases":[],"category":"security-software","description":"Cisco's network access control and identity management platform for enforcing security policies based on user identity and device compliance.","url":"https://junglewise.ai/threats/technologies/identity-services-engine"},"most_severe":[{"cve":"CVE-2025-20281","cvss":10,"epss":0.3603,"slug":"cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api","title":"Cisco Identity Services Engine unauthenticated RCE in API","severity":"critical","exploited":true,"published_at":"2025-07-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20281-cisco-identity-services-engine-unauthenticated-rce-in-api"},{"cve":"CVE-2026-76460","cvss":10,"epss":0.1403,"slug":"cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use","title":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.","severity":"critical","exploited":true,"published_at":"2026-09-16T21:17:21.43+00:00","url":"https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use"},{"cve":"CVE-2025-20337","cvss":10,"epss":0.0135,"slug":"cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api","title":"Cisco Identity Services Engine injection vulnerability in API","severity":"critical","exploited":true,"published_at":"2025-07-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-20337-cisco-identity-services-engine-injection-vulnerability-in-api"},{"cve":"CVE-2026-76423","cvss":10,"epss":0.0058,"slug":"cve-2026-76423-cisco-ise-rest-api-authentication-bypass","title":"Cisco ISE REST API authentication bypass","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:28.717+00:00","url":"https://junglewise.ai/threats/cve-2026-76423-cisco-ise-rest-api-authentication-bypass"},{"cve":"CVE-2026-20192","cvss":10,"epss":0.0046,"slug":"cve-2026-20192-cisco-identity-services-engine-improper-access-control","title":"Cisco Identity Services Engine improper access control","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:21.9+00:00","url":"https://junglewise.ai/threats/cve-2026-20192-cisco-identity-services-engine-improper-access-control"},{"cve":"CVE-2026-20130","cvss":10,"epss":0.004,"slug":"cve-2026-20130-cisco-identity-services-engine-improper-neutralization-of-special","title":"Cisco Identity Services Engine improper neutralization of special elements","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:21.607+00:00","url":"https://junglewise.ai/threats/cve-2026-20130-cisco-identity-services-engine-improper-neutralization-of-special"},{"cve":"CVE-2026-20147","cvss":9.9,"epss":0.1094,"slug":"cve-2026-20147-cisco-ise-command-injection-in-underlying-operating-system","title":"Cisco ISE command injection in underlying operating system","severity":"critical","exploited":false,"published_at":"2026-04-15T17:17:02.41+00:00","url":"https://junglewise.ai/threats/cve-2026-20147-cisco-ise-command-injection-in-underlying-operating-system"},{"cve":"CVE-2026-20180","cvss":9.9,"epss":0.0597,"slug":"cve-2026-20180-cisco-identity-services-engine-remote-code-execution-and","title":"Cisco Identity Services Engine remote code execution and privilege escalation","severity":"critical","exploited":false,"published_at":"2026-04-15T17:17:03.46+00:00","url":"https://junglewise.ai/threats/cve-2026-20180-cisco-identity-services-engine-remote-code-execution-and"},{"cve":"CVE-2026-20186","cvss":9.9,"epss":0.0591,"slug":"cve-2026-20186-cisco-identity-services-engine-command-injection-and-privilege","title":"Cisco Identity Services Engine command injection and privilege escalation","severity":"critical","exploited":false,"published_at":"2026-04-15T17:17:03.933+00:00","url":"https://junglewise.ai/threats/cve-2026-20186-cisco-identity-services-engine-command-injection-and-privilege"},{"cve":"CVE-2026-20307","cvss":9.9,"epss":0.0096,"slug":"cve-2026-20307-cisco-identity-services-engine-rce-via-deserialization-in","title":"Cisco Identity Services Engine RCE via deserialization in management interface","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:16.973+00:00","url":"https://junglewise.ai/threats/cve-2026-20307-cisco-identity-services-engine-rce-via-deserialization-in"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}