IS
Product
Identity Services Engine Passive Identity Connector
On CISA KEVExploited in the wild
31
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 4Medium 18Low 0
Watch
Add Identity Services Engine Passive Identity Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76460 In wildKEV | 10.0 | Sep 16 | Cisco Identity Services Engine Authentication Bypass Vulnerability Affected: 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more |
| CVE-2025-20337 In wildKEV | 10.0 | Jul 16 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more |
| CVE-2025-20281 In wildKEV | 10.0 | Jun 25 | Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more |
| CVE-2026-20130 | 10.0 | Sep 16 | Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-20192 | 10.0 | Sep 16 | Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2025-20282 | 10.0 | Jun 25 | A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute… Affected: 3.4.0; 3.4.0 |
| CVE-2026-20234 | 9.9 | Sep 16 | Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-20147 | 9.9 | Apr 15 | Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +33 more |
| CVE-2026-20181 | 9.1 | Jun 17 | Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +12 more |
| CVE-2026-20190 | 7.5 | Jun 17 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0 |
| CVE-2025-20284 | 7.2 | Jul 16 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
| CVE-2025-20283 | 7.2 | Jul 16 | A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
| CVE-2025-20130 | 7.2 | Jun 4 | A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker with… Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +15 more |
| CVE-2026-20136 | 6.0 | Apr 15 | Cisco Identity Services Engine Authenticated Privilege Escalation Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +12 more |
| CVE-2026-20146 | 5.5 | Jul 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +14 more |
| CVE-2026-76447 | 5.3 | Sep 16 | Cisco Identity Services Engine Certificate Reload Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76444 | 5.3 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; 3.4.0; +1 more |
| CVE-2026-76433 | 5.3 | Sep 16 | Cisco Identity Services Engine Information Disclosure Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +14 more |
| CVE-2026-76439 | 5.3 | Sep 16 | Cisco Identity Services Engine Event Injection Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76426 | 4.9 | Sep 16 | Cisco ISE REST API SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76431 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Deletion Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76446 | 4.9 | Sep 16 | Cisco Identity Services Engine External Entity Injection Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76432 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Write Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76448 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76434 | 4.9 | Sep 16 | Cisco Identity Services Engine Arbitrary File Read Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76451 | 4.9 | Sep 16 | Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76449 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76450 | 4.9 | Sep 16 | Cisco Identity Services Engine SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-76428 | 4.9 | Sep 16 | Cisco ISE Profiler SQL Injection Vulnerability Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more |
| CVE-2026-20148 | 4.9 | Apr 15 | Cisco Identity Services Engine Path Traversal Vulnerability Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +33 more |
| CVE-2025-20285 | 4.1 | Jul 16 | A vulnerability in the IP Access Restriction feature of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to bypass configured IP access restrictions and… Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +4 more |
Showing 31