Security Notices
CVE-2026-76449: Cisco Identity Services Engine SQL Injection Vulnerability
Cisco's authenticated database-injection entry covers ISE and ISE-PIC without identifying this CVE's exact query endpoint. Match product and branch to the fixed patch; the ISE 3.5 target is not an ISE-PIC upgrade path.
CVE-2026-76450: Cisco Identity Services Engine SQL Injection Vulnerability
This authenticated database-injection flaw affects ISE, not ISE-PIC. Match the ISE patch guidance and review administrative API access; the shared advisory does not identify this CVE's exact query or establish operating-system command execution.
CVE-2026-76425: Cisco ISE SQL Injection Vulnerability
An ISE administrator can inject SQL through API parameters to read database content and cause server-side requests. Apply the specific fix and examine outbound traffic as well as data access; root execution is not established.
CVE-2026-76451: Cisco Identity Services Engine Certificate Management SQL Injection Vulnerability
Certificate-management SQL injection affects ISE and ISE-PIC and requires administrative credentials. Follow the product-specific patch guidance; the shared description names no particular certificate field and does not establish private-key theft or command execution.
CVE-2026-76426: Cisco ISE REST API SQL Injection Vulnerability
An authenticated administrator can read the ISE or ISE-PIC monitoring database through REST API SQL injection. Apply the CVE-specific update and assess disclosure; the stated impact is not database modification or operating-system control.
CVE-2026-76427: Cisco ISE XML External Entity Injection Vulnerability
An ISE administrator can upload a crafted offline profiler feed that reads local files or contacts internal systems through XML entities. Apply the update and preserve suspect packages and outbound-request evidence.
CVE-2026-76428: Cisco ISE Profiler SQL Injection Vulnerability
An authenticated administrator can read the session database through REST API SQL injection in ISE and ISE-PIC. Apply this CVE's fix and review API activity; do not conflate session-data disclosure with the separate monitoring-database flaw.
CVE-2026-76431: Cisco ISE Arbitrary File Deletion Vulnerability
An ISE or ISE-PIC administrator can delete arbitrary files and directories through web file management. Apply the specific fix, preserve relevant requests, and assess restoration separately; patching does not recover content already deleted.
CVE-2026-76432: Cisco ISE Arbitrary File Write Vulnerability
An ISE or ISE-PIC administrator can upload files outside the intended directory. Apply the CVE-specific fix and investigate existing uploads; arbitrary file writing is established, but command execution is not demonstrated by this description.
CVE-2026-76433: Cisco ISE Information Disclosure Vulnerability
Unauthenticated provisioning-download requests can expose protected files in ISE and ISE-PIC. Review service reachability and apply the specific fix; the administrator requirement of neighboring upload and deletion flaws does not apply here.