Identity Services Engine Passive Identity Connector vulnerabilities

Product

Identity Services Engine Passive Identity Connector

by Cisco · last CVE Sep 16, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities31 In the news12 Timeline

Severity mix

Critical 9High 4Medium 18Low 0

Severity

All severities31 Critical9 High4 Medium18 Low0

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Identity Services Engine Passive Identity Connector to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-76460 In wildKEV	10.0	76%	Sep 16	Cisco Identity Services Engine Authentication Bypass Vulnerability Affected: 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more
CVE-2025-20337 In wildKEV	10.0	74%	Jul 16	Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more
CVE-2025-20281 In wildKEV	10.0	98%	Jun 25	Cisco ISE API Unauthenticated Remote Code Execution Vulnerability Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more
CVE-2026-20130	10.0	1%	Sep 16	Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more
CVE-2026-20192	10.0	0%	Sep 16	Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more
CVE-2025-20282	10.0	39%	Jun 25	A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute… Affected: 3.4.0; 3.4.0
CVE-2026-20234	9.9	0%	Sep 16	Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +13 more
CVE-2026-20147	9.9	10%	Apr 15	Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +33 more
CVE-2026-20181	9.1	9%	Jun 17	Cisco Identity Services Engine Remote Code Execution Vulnerability Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +12 more