CVE-2026-76460

KEV
Published: Set 16, 2026 Last Modified: Set 17, 2026
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 10,0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.

This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a crafted request to an affected API endpoint. A successful exploit could allow the attacker to gain unauthorized access to the affected device by bypassing the web-based management interface.

648

Incorrect Use of Privileged APIs

Incomplete
Common Consequences
Security Scopes Affected:
Access Control Confidentiality Integrity Availability
Potential Impacts:
Gain Privileges Or Assume Identity Read Application Data Execute Unauthorized Code Or Commands
Applicable Platforms
All platforms may be affected
View CWE Details
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.5.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.5.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.5.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.2.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.1.0:patch11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch9:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.2.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.4.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.4.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch8:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.1.0:patch5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch11:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine Passive Identity Connector by Cisco

cpe:2.3:a:cisco:identity_services_engine_passive_identity_connector:3.3.0:patch10:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Identity Services Engine by Cisco

cpe:2.3:a:cisco:identity_services_engine:3.3.0:patch4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026…
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/c…