CVE-2026-76423

Cisco ISE API Authentication Bypass Vulnerability

State: Published
Severity: 10.0 Critical
Published: Sep 16, 2026
Updated: Sep 17, 2026
Reserved: Aug 19, 2026

Description

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device.

This vulnerability is due to the REST API web service being exposed with insufficient authorization checks. An attacker could exploit this vulnerability by sending a crafted HTTP request to the exposed REST API port. A successful exploit could allow the attacker to read and modify ISE configuration and identity data with administrative privileges.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L	cisco

Weaknesses

CWE-290 Authentication Bypass by Spoofing

Affected Products

Product	Versions
Cisco Identity Services Engine SoftwareCisco	3.1.0Affected 3.1.0 p1Affected 3.1.0 p3Affected 3.1.0 p2Affected 3.2.0Affected 3.1.0 p4Affected 3.1.0 p5Affected 3.2.0 p1Affected 3.1.0 p6Affected 3.2.0 p2Affected 3.1.0 p7Affected 3.3.0Affected 3.2.0 p3Affected 3.2.0 p4Affected 3.1.0 p8Affected 3.2.0 p5Affected 3.2.0 p6Affected 3.1.0 p9Affected 3.3 Patch 2Affected 3.3 Patch 1Affected 3.3 Patch 3Affected 3.4.0Affected 3.2.0 p7Affected 3.3 Patch 4Affected 3.4 Patch 1Affected and 23 more versions
Cisco ISE Passive Identity ConnectorCisco	3.2.0Affected 3.1.0Affected 3.3.0Affected 3.4.0Affected 3.5.0Affected

Product

Versions

Cisco Identity Services Engine SoftwareCisco

3.1.0Affected
3.1.0 p1Affected
3.1.0 p3Affected
3.1.0 p2Affected
3.2.0Affected
3.1.0 p4Affected
3.1.0 p5Affected
3.2.0 p1Affected
3.1.0 p6Affected
3.2.0 p2Affected
3.1.0 p7Affected
3.3.0Affected
3.2.0 p3Affected
3.2.0 p4Affected
3.1.0 p8Affected
3.2.0 p5Affected
3.2.0 p6Affected
3.1.0 p9Affected
3.3 Patch 2Affected
3.3 Patch 1Affected
3.3 Patch 3Affected
3.4.0Affected
3.2.0 p7Affected
3.3 Patch 4Affected
3.4 Patch 1Affected
and 23 more versions

Cisco ISE Passive Identity ConnectorCisco

3.2.0Affected
3.1.0Affected
3.3.0Affected
3.4.0Affected
3.5.0Affected

References

cisco-sa-ise-multi-hrP9jQSQ

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.