Cisco Identity Services Engine Passive Identity Connector vulnerabilities

31 CVEs affecting Cisco Identity Services Engine Passive Identity Connector, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76460, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-20281: Cisco Identity Services Engine Injection Vulnerability, published 2025-06-25. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2025-07-28. EPSS: 97.6% chance of exploitation in the next 30 days. A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker…
CVE-2025-20337: Cisco Identity Services Engine Injection Vulnerability, published 2025-07-16. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2025-07-28. EPSS: 74.5% chance of exploitation in the next 30 days. A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker…
CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability, published 2026-09-16. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-09-16. EPSS: 14% chance of exploitation in the next 30 days. A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication…
CVE-2025-20282, published 2025-06-25. Critical severity, CVSS 10.0. EPSS: 38.7% chance of exploitation in the next 30 days. A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the…
CVE-2025-20284, published 2025-07-16. High severity, CVSS 7.2. EPSS: 25.1% chance of exploitation in the next 30 days. A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This…
CVE-2025-20283, published 2025-07-16. High severity, CVSS 7.2. EPSS: 13.2% chance of exploitation in the next 30 days. A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as root. This…
CVE-2026-20147, published 2026-04-15. Critical severity, CVSS 9.9. EPSS: 10.4% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this…
CVE-2026-20181, published 2026-06-17. Critical severity, CVSS 9.1. EPSS: 8.9% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this…
CVE-2026-20148, published 2026-04-15. Medium severity, CVSS 4.9. EPSS: 6.5% chance of exploitation in the next 30 days. A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system and read arbitrary files. To exploit…
CVE-2026-76433, published 2026-09-16. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an affected device. This…

Latest

CVE-2026-76451, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on…
CVE-2026-76450, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on…
CVE-2026-76449, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on…
CVE-2026-76448, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL or HQL injection attack on…
CVE-2026-76447, published 2026-09-16. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an administrative reload of the OCSP…
CVE-2026-76446, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. This…
CVE-2026-76444, published 2026-09-16. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from an affected device. This…
CVE-2026-76439, published 2026-09-16. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status…
CVE-2026-76434, published 2026-09-16. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read arbitrary files from…