10
CVE-2026-76423
- EPSS 0.55%
- Veröffentlicht 16.09.2026 20:08:18
- Zuletzt bearbeitet 17.09.2026 12:18:26
- Erkennungen
Cisco ISE API Authentication Bypass Vulnerability
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request to the exposed REST API port. A successful exploit could allow the attacker to read and modify ISE configuration and identity data with administrative privileges.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt
Cisco Identity Services Engine Software
Default Statusunknown
Version
3.1.0
Status
affected
Version
3.1.0 p1
Status
affected
Version
3.1.0 p3
Status
affected
Version
3.1.0 p2
Status
affected
Version
3.2.0
Status
affected
Version
3.1.0 p4
Status
affected
Version
3.1.0 p5
Status
affected
Version
3.2.0 p1
Status
affected
Version
3.1.0 p6
Status
affected
Version
3.2.0 p2
Status
affected
Version
3.1.0 p7
Status
affected
Version
3.3.0
Status
affected
Version
3.2.0 p3
Status
affected
Version
3.2.0 p4
Status
affected
Version
3.1.0 p8
Status
affected
Version
3.2.0 p5
Status
affected
Version
3.2.0 p6
Status
affected
Version
3.1.0 p9
Status
affected
Version
3.3 Patch 2
Status
affected
Version
3.3 Patch 1
Status
affected
Version
3.3 Patch 3
Status
affected
Version
3.4.0
Status
affected
Version
3.2.0 p7
Status
affected
Version
3.3 Patch 4
Status
affected
Version
3.4 Patch 1
Status
affected
Version
3.1.0 p10
Status
affected
Version
3.3 Patch 5
Status
affected
Version
3.3 Patch 6
Status
affected
Version
3.4 Patch 2
Status
affected
Version
3.3 Patch 7
Status
affected
Version
3.4 Patch 3
Status
affected
Version
3.5.0
Status
affected
Version
3.4 Patch 4
Status
affected
Version
3.3 Patch 8
Status
affected
Version
3.2 Patch 8
Status
affected
Version
3.5 Patch 1
Status
affected
Version
3.3 Patch 9
Status
affected
Version
3.2 Patch 9
Status
affected
Version
3.4 Patch 5
Status
affected
Version
3.5 Patch 3
Status
affected
Version
3.5 Patch 2
Status
affected
Version
3.3 Patch 10
Status
affected
Version
3.3 Patch 11
Status
affected
Version
3.4 Patch 6
Status
affected
Version
3.2 Patch 10
Status
affected
Version
3.1.0 p72
Status
affected
Version
3.1.0 p11
Status
affected
Version
3.3 Patch 12
Status
affected
HerstellerCisco
≫
Produkt
Cisco ISE Passive Identity Connector
Default Statusunknown
Version
3.2.0
Status
affected
Version
3.1.0
Status
affected
Version
3.3.0
Status
affected
Version
3.4.0
Status
affected
Version
3.5.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.55% | 0.447 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Cisco PSIRT | 10 | 3.9 | 6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
|
CWE-290 Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-hrP9jQSQ