Login Request a demo
IS
Product
Identity Services Engine
by Cisco · last CVE Sep 16, 2026
On CISA KEVExploited in the wild
197
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities197In the news12Timeline
Severity mix
Critical 14High 39Medium 133Low 2
Severity
All severities197Critical14High39Medium133Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Identity Services Engine to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76460
In wildKEV
10.0
76%
Sep 16
Cisco Identity Services Engine Authentication Bypass Vulnerability
Affected: 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more
CVE-2025-20337
In wildKEV
10.0
74%
Jul 16
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more
CVE-2025-20281
In wildKEV
10.0
98%
Jun 25
Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
Affected: 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +3 more
CVE-2026-20130
10.0
1%
Sep 16
Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more
CVE-2026-20192
10.0
0%
Sep 16
Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more
CVE-2025-20282
10.0
39%
Jun 25
A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute…
Affected: 3.4.0; 3.4.0
CVE-2026-20234
9.9
0%
Sep 16
Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities
Affected: 3.1.0 before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +17 more
CVE-2026-20180
9.9
6%
Apr 15
Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability
Affected: before 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more
CVE-2026-20186
9.9
6%
Apr 15
Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability
Affected: before 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; 3.2.0; +15 more
CVE-2026-20147
9.9
10%
Apr 15
Cisco Identity Services Engine Remote Code Execution Vulnerability
Affected: before 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more
CVE-2025-20286
9.8
1%
Jun 4
A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an…
Affected: 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; 3.1.0; +34 more
CVE-2022-20733
9.8
1%
Jun 15
A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without credentials and access all roles…
Affected: 3.1; 3.1
CVE-2017-6747
9.8
5%
Aug 7
A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass local authentication
Affected: 1.3(0.722); 1.3(0.876); 1.3(0.909); 1.3(106.146); 1.3(120.135); 1.4(0.109); +12 more
CVE-2026-20181
9.1
9%
Jun 17
Cisco Identity Services Engine Remote Code Execution Vulnerability
Affected: before 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; 3.3.0; +16 more
Showing 14