CVE-2026-76439

Cisco Identity Services Engine Event Injection Vulnerability

State: Published
Severity: 5.3 Medium
Published: Sep 16, 2026
Updated: Sep 18, 2026
Reserved: Aug 19, 2026

Description

A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline.

This vulnerability is due to insufficient authentication on an internal interface that is exposed through the guest portal. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to manipulate the posture status on the affected system.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	cisco

Weaknesses

CWE-306 Missing Authentication for Critical Function

Affected Products

Product	Versions
Cisco Identity Services Engine SoftwareCisco	3.1.0Affected 3.1.0 p1Affected 3.1.0 p3Affected 3.1.0 p2Affected 3.2.0Affected 3.1.0 p4Affected 3.1.0 p5Affected 3.2.0 p1Affected 3.1.0 p6Affected 3.2.0 p2Affected 3.1.0 p7Affected 3.3.0Affected 3.2.0 p3Affected 3.2.0 p4Affected 3.1.0 p8Affected 3.2.0 p5Affected 3.2.0 p6Affected 3.1.0 p9Affected 3.3 Patch 2Affected 3.3 Patch 1Affected 3.3 Patch 3Affected 3.4.0Affected 3.2.0 p7Affected 3.3 Patch 4Affected 3.4 Patch 1Affected and 22 more versions
Cisco ISE Passive Identity ConnectorCisco	3.2.0Affected 3.1.0Affected 3.3.0Affected 3.4.0Affected 3.5.0Affected

Product

Versions

Cisco Identity Services Engine SoftwareCisco

3.1.0Affected
3.1.0 p1Affected
3.1.0 p3Affected
3.1.0 p2Affected
3.2.0Affected
3.1.0 p4Affected
3.1.0 p5Affected
3.2.0 p1Affected
3.1.0 p6Affected
3.2.0 p2Affected
3.1.0 p7Affected
3.3.0Affected
3.2.0 p3Affected
3.2.0 p4Affected
3.1.0 p8Affected
3.2.0 p5Affected
3.2.0 p6Affected
3.1.0 p9Affected
3.3 Patch 2Affected
3.3 Patch 1Affected
3.3 Patch 3Affected
3.4.0Affected
3.2.0 p7Affected
3.3 Patch 4Affected
3.4 Patch 1Affected
and 22 more versions

Cisco ISE Passive Identity ConnectorCisco

3.2.0Affected
3.1.0Affected
3.3.0Affected
3.4.0Affected
3.5.0Affected

References

cisco-sa-ise-multiauth-bypass-sgD2HbL4

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.