{"schema_version":1,"title":"Cisco ISE Passive Identity Connector vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 19 vulnerabilities in Cisco ISE Passive Identity Connector: 0 in the last 7 days and 16 in the last 90 days, 5 of them critical and 1 exploited in the wild. The most recent, CVE-2026-76460, was published on 16 September 2026.","url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector","json_url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ise-passive-identity-connector","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":19,"critical":5,"exploited":1,"last_7_days":0,"last_30_days":15,"last_90_days":16,"last_365_days":19},"latest":[{"cve":"CVE-2026-76460","cvss":10,"epss":0.1403,"slug":"cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use","title":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.","severity":"critical","exploited":true,"published_at":"2026-09-16T21:17:21.43+00:00","url":"https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use"},{"cve":"CVE-2026-76451","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76451-cisco-ise-sql-and-hql-injection-in-apis","title":"Cisco ISE SQL and HQL injection in APIs","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:21.3+00:00","url":"https://junglewise.ai/threats/cve-2026-76451-cisco-ise-sql-and-hql-injection-in-apis"},{"cve":"CVE-2026-76450","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76450-cisco-identity-services-engine-sql-and-hql-injection","title":"Cisco Identity Services Engine SQL and HQL injection","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:21.163+00:00","url":"https://junglewise.ai/threats/cve-2026-76450-cisco-identity-services-engine-sql-and-hql-injection"},{"cve":"CVE-2026-76449","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76449-cisco-ise-sql-hql-injection-in-apis","title":"Cisco ISE SQL/HQL injection in APIs","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:21.017+00:00","url":"https://junglewise.ai/threats/cve-2026-76449-cisco-ise-sql-hql-injection-in-apis"},{"cve":"CVE-2026-76448","cvss":4.9,"epss":0.0043,"slug":"cve-2026-76448-cisco-identity-services-engine-sql-and-hql-injection","title":"Cisco Identity Services Engine SQL and HQL injection","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.867+00:00","url":"https://junglewise.ai/threats/cve-2026-76448-cisco-identity-services-engine-sql-and-hql-injection"},{"cve":"CVE-2026-76447","cvss":5.3,"epss":0.0038,"slug":"cve-2026-76447-cisco-ise-ocsp-responder-authentication-bypass","title":"Cisco ISE OCSP responder authentication bypass","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.73+00:00","url":"https://junglewise.ai/threats/cve-2026-76447-cisco-ise-ocsp-responder-authentication-bypass"},{"cve":"CVE-2026-76446","cvss":4.9,"epss":0.003,"slug":"cve-2026-76446-cisco-ise-external-entity-injection-in-api","title":"Cisco ISE external entity injection in API","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.597+00:00","url":"https://junglewise.ai/threats/cve-2026-76446-cisco-ise-external-entity-injection-in-api"},{"cve":"CVE-2026-76434","cvss":4.9,"epss":0.0038,"slug":"cve-2026-76434-cisco-ise-path-traversal-in-certificate-import","title":"Cisco ISE path traversal in certificate import","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:15.177+00:00","url":"https://junglewise.ai/threats/cve-2026-76434-cisco-ise-path-traversal-in-certificate-import"},{"cve":"CVE-2026-76428","cvss":4.9,"epss":0.0048,"slug":"cve-2026-76428-cisco-ise-rest-api-sql-injection-in-session-database","title":"Cisco ISE REST API SQL injection in session database","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:14.553+00:00","url":"https://junglewise.ai/threats/cve-2026-76428-cisco-ise-rest-api-sql-injection-in-session-database"},{"cve":"CVE-2026-20287","cvss":6.5,"epss":0.0021,"slug":"cve-2026-20287-cisco-identity-services-engine-improper-privilege-management","title":"Cisco Identity Services Engine improper privilege management","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.48+00:00","url":"https://junglewise.ai/threats/cve-2026-20287-cisco-identity-services-engine-improper-privilege-management"},{"cve":"CVE-2026-20285","cvss":4.3,"epss":0.0036,"slug":"cve-2026-20285-cisco-identity-services-engine-authorization-bypass-in-web","title":"Cisco Identity Services Engine authorization bypass in web management interface","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.217+00:00","url":"https://junglewise.ai/threats/cve-2026-20285-cisco-identity-services-engine-authorization-bypass-in-web"},{"cve":"CVE-2026-20237","cvss":9.1,"epss":0.0033,"slug":"cve-2026-20237-cisco-identity-services-engine-improper-input-validation","title":"Cisco Identity Services Engine improper input validation","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:22.407+00:00","url":"https://junglewise.ai/threats/cve-2026-20237-cisco-identity-services-engine-improper-input-validation"},{"cve":"CVE-2026-20194","cvss":9.1,"epss":0.0045,"slug":"cve-2026-20194-cisco-identity-services-engine-incorrect-resource-transfer","title":"Cisco Identity Services Engine incorrect resource transfer vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:22.047+00:00","url":"https://junglewise.ai/threats/cve-2026-20194-cisco-identity-services-engine-incorrect-resource-transfer"},{"cve":"CVE-2026-20306","cvss":9.1,"epss":0.0137,"slug":"cve-2026-20306-cisco-ise-rest-api-command-injection","title":"Cisco ISE REST API command injection","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:16.857+00:00","url":"https://junglewise.ai/threats/cve-2026-20306-cisco-ise-rest-api-command-injection"},{"cve":"CVE-2026-20234","cvss":9.9,"epss":0.0037,"slug":"cve-2026-20234-cisco-identity-services-engine-insufficiently-protected","title":"Cisco Identity Services Engine insufficiently protected credentials","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:16.537+00:00","url":"https://junglewise.ai/threats/cve-2026-20234-cisco-identity-services-engine-insufficiently-protected"},{"cve":"CVE-2026-20146","cvss":5.5,"slug":"cve-2026-20146-cisco-ise-path-traversal-in-management-interface","title":"Cisco ISE path traversal in management interface","severity":"medium","exploited":false,"published_at":"2026-07-15T17:16:46.97+00:00","url":"https://junglewise.ai/threats/cve-2026-20146-cisco-ise-path-traversal-in-management-interface"},{"cve":"CVE-2026-20190","cvss":7.5,"epss":0.0037,"slug":"cve-2026-20190-cisco-ise-improper-authorization-information-disclosure","title":"Cisco ISE improper authorization information disclosure","severity":"high","exploited":false,"published_at":"2026-06-17T17:16:43.13+00:00","url":"https://junglewise.ai/threats/cve-2026-20190-cisco-ise-improper-authorization-information-disclosure"},{"cve":"CVE-2026-20148","cvss":4.9,"epss":0.0921,"slug":"cve-2026-20148-cisco-ise-path-traversal-in-underlying-operating-system","title":"Cisco ISE path traversal in underlying operating system","severity":"medium","exploited":false,"published_at":"2026-04-15T17:17:02.637+00:00","url":"https://junglewise.ai/threats/cve-2026-20148-cisco-ise-path-traversal-in-underlying-operating-system"},{"cve":"CVE-2026-20136","cvss":6,"epss":0.0053,"slug":"cve-2026-20136-cisco-ise-command-injection-in-cli","title":"Cisco ISE command injection in CLI","severity":"medium","exploited":false,"published_at":"2026-04-15T17:17:02.15+00:00","url":"https://junglewise.ai/threats/cve-2026-20136-cisco-ise-command-injection-in-cli"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":5,"exploited":1,"vulnerabilities":15},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Cisco IOS","slug":"ios","vulnerabilities":69,"url":"https://junglewise.ai/threats/technologies/ios"},{"name":"Cisco IOS XE","slug":"ios-xe","vulnerabilities":53,"url":"https://junglewise.ai/threats/technologies/ios-xe"},{"name":"Cisco Identity Services Engine","slug":"identity-services-engine","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/identity-services-engine"},{"name":"Cisco Firepower Threat Defense Software","slug":"firepower-threat-defense-software","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense-software"},{"name":"Cisco IOS XR","slug":"ios-xr","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/ios-xr"},{"name":"Cisco IOS XE Software","slug":"ios-xe-software","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/ios-xe-software"},{"name":"Cisco Firepower Threat Defense","slug":"firepower-threat-defense","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/firepower-threat-defense"},{"name":"Cisco Adaptive Security Appliance Software","slug":"secure-firewall-asa-software","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/secure-firewall-asa-software"},{"name":"Cisco Ios Software","slug":"ios-software","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/ios-software"},{"name":"Cisco Secure Firewall Management Center","slug":"secure-firewall-management-center","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/secure-firewall-management-center"},{"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"name":"Cisco Adaptive Security Appliance (ASA)","slug":"adaptive-security-appliance-asa","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/adaptive-security-appliance-asa"}],"technology":{"hub":true,"name":"Cisco ISE Passive Identity Connector","slug":"ise-passive-identity-connector","vendor":{"name":"Cisco","slug":"cisco","url":"https://junglewise.ai/threats/vendors/cisco"},"aliases":[],"category":"network-security","url":"https://junglewise.ai/threats/technologies/ise-passive-identity-connector"},"most_severe":[{"cve":"CVE-2026-76460","cvss":10,"epss":0.1403,"slug":"cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use","title":"A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.","severity":"critical","exploited":true,"published_at":"2026-09-16T21:17:21.43+00:00","url":"https://junglewise.ai/threats/cve-2026-76460-cisco-identity-services-engine-incorrect-privileged-api-use"},{"cve":"CVE-2026-20234","cvss":9.9,"epss":0.0037,"slug":"cve-2026-20234-cisco-identity-services-engine-insufficiently-protected","title":"Cisco Identity Services Engine insufficiently protected credentials","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:16.537+00:00","url":"https://junglewise.ai/threats/cve-2026-20234-cisco-identity-services-engine-insufficiently-protected"},{"cve":"CVE-2026-20306","cvss":9.1,"epss":0.0137,"slug":"cve-2026-20306-cisco-ise-rest-api-command-injection","title":"Cisco ISE REST API command injection","severity":"critical","exploited":false,"published_at":"2026-09-16T17:17:16.857+00:00","url":"https://junglewise.ai/threats/cve-2026-20306-cisco-ise-rest-api-command-injection"},{"cve":"CVE-2026-20194","cvss":9.1,"epss":0.0045,"slug":"cve-2026-20194-cisco-identity-services-engine-incorrect-resource-transfer","title":"Cisco Identity Services Engine incorrect resource transfer vulnerability","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:22.047+00:00","url":"https://junglewise.ai/threats/cve-2026-20194-cisco-identity-services-engine-incorrect-resource-transfer"},{"cve":"CVE-2026-20237","cvss":9.1,"epss":0.0033,"slug":"cve-2026-20237-cisco-identity-services-engine-improper-input-validation","title":"Cisco Identity Services Engine improper input validation","severity":"critical","exploited":false,"published_at":"2026-09-16T20:17:22.407+00:00","url":"https://junglewise.ai/threats/cve-2026-20237-cisco-identity-services-engine-improper-input-validation"},{"cve":"CVE-2026-20190","cvss":7.5,"epss":0.0037,"slug":"cve-2026-20190-cisco-ise-improper-authorization-information-disclosure","title":"Cisco ISE improper authorization information disclosure","severity":"high","exploited":false,"published_at":"2026-06-17T17:16:43.13+00:00","url":"https://junglewise.ai/threats/cve-2026-20190-cisco-ise-improper-authorization-information-disclosure"},{"cve":"CVE-2026-20287","cvss":6.5,"epss":0.0021,"slug":"cve-2026-20287-cisco-identity-services-engine-improper-privilege-management","title":"Cisco Identity Services Engine improper privilege management","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:09.48+00:00","url":"https://junglewise.ai/threats/cve-2026-20287-cisco-identity-services-engine-improper-privilege-management"},{"cve":"CVE-2026-20136","cvss":6,"epss":0.0053,"slug":"cve-2026-20136-cisco-ise-command-injection-in-cli","title":"Cisco ISE command injection in CLI","severity":"medium","exploited":false,"published_at":"2026-04-15T17:17:02.15+00:00","url":"https://junglewise.ai/threats/cve-2026-20136-cisco-ise-command-injection-in-cli"},{"cve":"CVE-2026-20146","cvss":5.5,"slug":"cve-2026-20146-cisco-ise-path-traversal-in-management-interface","title":"Cisco ISE path traversal in management interface","severity":"medium","exploited":false,"published_at":"2026-07-15T17:16:46.97+00:00","url":"https://junglewise.ai/threats/cve-2026-20146-cisco-ise-path-traversal-in-management-interface"},{"cve":"CVE-2026-76447","cvss":5.3,"epss":0.0038,"slug":"cve-2026-76447-cisco-ise-ocsp-responder-authentication-bypass","title":"Cisco ISE OCSP responder authentication bypass","severity":"medium","exploited":false,"published_at":"2026-09-16T21:17:20.73+00:00","url":"https://junglewise.ai/threats/cve-2026-76447-cisco-ise-ocsp-responder-authentication-bypass"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}