CVE-2026-76444: Cisco ISE Information Disclosure Vulnerability
Missing authentication on the ISE and ISE-PIC PRRT service can expose sensitive configuration. Check that internal service's reachability and install the CVE-specific fix; the stated impact is disclosure, not administrative configuration changes.
CVE-2026-76439: Cisco ISE Event Injection Vulnerability
Unauthenticated guest-portal requests can forge ISE endpoint posture-status events. Apply the specific update and preserve posture history; the reviewed description establishes status manipulation, not operating-system command execution despite the inconsistent heading.
CVE-2026-76438: Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability
A low-privilege BroadWorks CommPilot user can change configuration on selected pages through missing authorization checks. Choose the fix for the installed CommPilot or bundled Application Server package; authentication is still required.
CVE-2026-76434: Cisco ISE Arbitrary File Read Vulnerability
An ISE or ISE-PIC administrator can read arbitrary files through certificate import. Install the CVE-specific update and assess earlier import requests; the description supports file disclosure, not command execution from importing a certificate.
CVE-2026-76433: Cisco ISE Information Disclosure Vulnerability
Unauthenticated provisioning-download requests can expose protected files in ISE and ISE-PIC. Review service reachability and apply the specific fix; the administrator requirement of neighboring upload and deletion flaws does not apply here.
CVE-2026-76432: Cisco ISE Arbitrary File Write Vulnerability
An ISE or ISE-PIC administrator can upload files outside the intended directory. Apply the CVE-specific fix and investigate existing uploads; arbitrary file writing is established, but command execution is not demonstrated by this description.
CVE-2026-76431: Cisco ISE Arbitrary File Deletion Vulnerability
An ISE or ISE-PIC administrator can delete arbitrary files and directories through web file management. Apply the specific fix, preserve relevant requests, and assess restoration separately; patching does not recover content already deleted.
CVE-2026-76428: Cisco ISE Profiler SQL Injection Vulnerability
An authenticated administrator can read the session database through REST API SQL injection in ISE and ISE-PIC. Apply this CVE's fix and review API activity; do not conflate session-data disclosure with the separate monitoring-database flaw.
CVE-2026-76427: Cisco ISE XML External Entity Injection Vulnerability
An ISE administrator can upload a crafted offline profiler feed that reads local files or contacts internal systems through XML entities. Apply the update and preserve suspect packages and outbound-request evidence.
CVE-2026-76426: Cisco ISE REST API SQL Injection Vulnerability
An authenticated administrator can read the ISE or ISE-PIC monitoring database through REST API SQL injection. Apply the CVE-specific update and assess disclosure; the stated impact is not database modification or operating-system control.