CRITICAL CWE-290
CVE-2026-76423
Cisco ISE API Authentication Bypass Vulnerability
Cisco·Identity Services Engine Software
10.0/ 10
CVSS 3.1
Critical severity
0.58%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 48% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Sep 16, 2026
- Updated
- Sep 17, 2026
- First covered
- Sep 18, 2026
- Latest story
- 2 months ago
Summary
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device.This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request to the exposed REST API port. A successful exploit could allow the attacker to read and modify ISE configuration and identity data with administrative privileges.
CWE-290Authentication Bypass by Spoofing
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityLow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:LAffected products
- Cisco Identity Services Engine Software3.1.03.1.0 p13.1.0 p33.1.0 p2
- Cisco ISE Passive Identity Connector3.2.03.1.03.3.03.4.0