Cisco Ise Passive Identity Connector vulnerabilities

8 CVEs affecting Cisco Ise Passive Identity Connector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20287, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-20305, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate…
CVE-2026-20306, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to perform command injection attacks on the underlying operating system and elevate privileges…
CVE-2026-76423, published 2026-09-16. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device. This vulnerability is due to the…
CVE-2026-20194, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have…
CVE-2026-20285, published 2026-09-16. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to…
CVE-2026-20237, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have…
CVE-2025-20331, published 2025-08-06. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the…
CVE-2026-20287, published 2026-09-16. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have…